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Ever-more advanced drones capable of carrying sophisticated imaging 
equipment and significant payloads are readily available to the civilian 
market. Unmanned aerial vehicles (UAVs) currently present the greatest 
risk because of their capabilities and widespread availability, but 
developments in unmanned ground (UGVs) and marine vehicles (UMVs) 
are opening up new avenues for hostile groups to exploit. 

A range of terrorist, insurgent, criminal, corporate and activist threat 
groups have already demonstrated the ability to use civilian drones 
for attacks and intelligence gathering. The best defence against the 
hostile use of drones is to employ a hierarchy of countermeasures 
encompassing regulatory countermeasures, passive countermeasures 
and active countermeasures. 

Regulatory countermeasures can restrict the capabilities of commercially 
available drones and limit the ability of hostile groups and individuals to 
procure and fly drones. Policymakers should pass stricter regulations 
limiting the capabilities of commercially available drones in the key 
specifications affecting hostile drone operations, particularly payload 
capacity. Particular attention should be paid to limiting the attack and 
ISR capabilities of UAVs and the attack capabilities of surface UMVs. 
Manufacturers should be required to install firmware that includes the 
GPS coordinates of no-fly zones around sensitive fixed locations. Finally, 
civilian operators of drones capable of carrying payloads should be 
licenced and the serial numbers of purchased drones registered. 

Passive countermeasures alert security to the presence of any drone 
within a no-fly zone or defensive perimeter around a static or mobile 
target. They limit the ability of hostile groups and individuals to guide a 
drone onto a mobile target or target of opportunity or take evasive action 
against any kinetic defences. The British government should support the 
research and development of commercial multi-sensor systems capable 
of detecting and tracking drones within a target area. The government 
should also make funding available to police forces and specialist units 
for the purchase of early warning systems and other passive drone 
countermeasures, including radio frequency jammers and GPS jammers. 
The government should also relax the regulations restricting the use of 
radio frequency jammers for protection against hostile drone use around 
defined key sites. 

Active countermeasures can be deployed against drones that still 
represent a threat despite passive systems being employed. However, 
the active countermeasures currently available for use in non-military 
settings are limited. The British government should support the research 
and development of innovative less-lethal anti-drone systems, such as 
directional radio frequency jammers, lasers and malware, and set out 
clear guidelines for the police and military use of kinetic weapons against 
hostile drones as a last line of defence. 

However, such countermeasures are not foolproof. Furthermore, 
there is also the very real chance that, as with drones themselves, 
countermeasures will be deployed in turn by some threat groups against 
British police or military drones. The technology of remote-control warfare 
is impossible to control; the ultimate defence is to address the root drivers 
of the threat in the first place. 


Hostile drones: The use of civilian drones by non- 
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After long and frequently controversial use by the military, unmanned 
vehicle technology is now being widely employed in numerous civilian 
settings. There are unmanned vehicles (or drones) for use in the air 
(UAVs), on land (UGVs) and on or under the sea (UMVs). Drones are 
used for leisure and to monitor crops, take aerial photographs, track 
hurricanes, protect wildlife, monitor traffic, deliver parcels, undertake 
search and rescue operations and monitor disaster zones. As with many 
preceding technologies, civilian drones are also used for less benign 
purposes, including snooping and harassment, drug trafficking and 
smuggling contraband into prisons. 

Ongoing large-scale commercial investment has led to civilian drones 
becoming cheaper, able to operate over longer ranges and capable of 
carrying ever-larger payloads. The pace of development has accelerated 
in recent years, with a vast range of models now available to the civilian 
customer. There are hundreds of models available, ranging in size from 
that of an AA battery to prototypes capable of carrying a person. 

The legislation governing the civilian use of drones is still evolving. It is 
struggling to keep up with the speed at which innovative uses are being 
identified and new drones developed. There are growing concerns over 
the use of drones by private individuals with little knowledge of aviation 
rules. In July 2015, the US Department of Homeland Security distributed 
an intelligence assessment to law enforcement agencies warning of the 
possibility of criminal or terrorist groups using unmanned aerial vehicles. 

In February 2015, the House of Lords EU Select Committee called for 
the mandatory registration of all civilian drones in the United Kingdom. 

As legislation stands, anyone can buy a drone and immediately operate 
it without any training or a license, as long as the drone weighs less than 
20 kilograms and it is not being used for commercial purposes. While 
there are minimal regulations specifically governing the use of ground 
and marine drones, aerial versions must not be flown within 150 metres of 
any populated area or 50 metres of any other person, vehicle or structure. 
The operator is also required to keep the drone in sight, within 500 metres 
and below 400 feet in altitude. While these simple rules will be followed 
by the majority of leisure users, those with more nefarious motivations 
will be less inclined to adhere to them. Even if followed, the regulations 
cannot account for operator error or technical drone failures. The 
regulations surrounding UGVs and UMVs are less clear, though existing 
maritime navigation rules and motor vehicle regulations will likely apply 
and combat vehicles will likely be covered by existing import/export arms 
control regimes. 

This report details the findings of our study into the hostile use of 
drones by non-state actors against British targets. While the focus 
is on unmanned aerial vehicles, we have examined the designs and 
capabilities of over 200 current and upcoming unmanned aerial, ground 
and marine systems in order to understand the threat these platforms 
pose to potential targets. The previous hostile use of drones by non-state 
actors is also examined. A range of terrorist, insurgent, criminal, corporate 
and activist threat groups using drones for attacks and intelligence 
gathering are identified. The report outlines specific recommendations on 
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the strategies available to mitigate the threat of 
the hostile use of drones by non-state actors in 
the short to medium term. 

There is no doubt that unmanned vehicles 
are here to stay and will have a considerable 
impact on society, both beneficial and 
detrimental. Although there is still a large gap 
between the capabilities of military and civilian 
drones, commercially available drones are 
giving hobbyists, companies and hostile groups 
access to capabilities previously only available 
to the military. Law enforcement agencies 
and policymakers are struggling to respond 
appropriately to this development. This report is 
a contribution to countering that threat. 
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Unmanned aerial vehicles 


The civil and commercial market for unmanned aerial vehicles has 
grown significantly over the last five years. The increasing uptake by the 
commercial sector is clearly evidenced in the growing numbers of US 
Federal Aviation Administration (FAA) exemptions for drone operators to 
fly UAVs in the National Airspace System (NAS), 1 with the exemptions 
list showing a broad range of UAV technologies, uses and capabilities. 2 
The UK Civil Aviation Authority (CAA) also has a similar licensing regime 
for operators using UAVs for commercial aerial work and equipped for 
data acquisition. As of 11 September 2015, the CAA has issued 1,036 
current UAV licences, with an estimated 37% of licences for models in the 
7-20 kilogram weight class. 3 The civil or hobbyist market is also showing 
significant growth. Some estimates have the global civil and commercial 
UAV sector valued at €563.7 million (£418 million). 4 

UAVs are commercially available as off-the-shelf Ready to Fly (RTF), Bind 
and Fly (BNF -with customisable transmitter) and Plug and Fly (PNF 
- with customisable transmitter, receiver, battery and charger). Users 
with no prior UAV flying experience can procure RTF models, and more 
experienced and knowledgeable users can purchase fully-customisable 
PNF models. Most commercially available models are rotary multicopter 
UAVs coming in quadcopter (four propellers), hexacopter (six propellers) 
and octocopter (eight propellers) variants. Fixed-wing UAVs are more 
frequently used for commercial deployments in agriculture, public safety, 
emergency response and ISR. Many UAV manufactures sell individual 
components, enabling customers to build fully-customised drones. This 
allows users to achieve specific capabilities, such as flight time, payload 
capacity, programmable flight, maximum speed and weather hardening. 
Table 1 lists the most popular and readily-available commercial UAVs 
across three price points (low end, mid level and high end) and provides 
basic specification information. 

Our analysis of the 202 commercially-available drones listed on the 
product comparison site SpecOut.com reveals that the listed drones 
have an average flight time of 18 minutes, an average range of 1,400 
metres and median price of $600 (£390). 5 Our analysis of FAA Section 
333 exemptions indicates that in the United States the agricultural and 
film sector are using UAVs with the largest capacity for heavier payloads, 
most likely a result of needing to carry larger sensor and imagery 
equipment. The public safety, emergency response and infrastructure 
inspection sectors appear to be relying upon UAVs with greater capacity 
for all-weather conditions. 


1 Section 333 FAA Modernization and Reform Act of 2012 (FMRA). 

2 https://www. faa. gov/uas/legislative_programs/section_333/333__authorizations/ 
and http://auvsiiink.org/advocacy/Section333.html. 

3 https://www.caa.co.uk/docs/1995/SUA%200perators%2011Sep15.pdf. 

4 iNEA Consulting (2014), Global Commercial and Civil UAV Market Guide 2014- 
2015. 

5 http://drones.specout.com. 


A0326651 7-000007 

















Specifications affecting hostile UAV 
operations 

A number of specifications are critical to the 
capabilities and uses of aerial drones. Users 
seeking greater payload capacity, flight time 
and range will most likely build customised 
drones from individual components to 
specification, requiring some basic technical 
knowledge. The specifications most relevant to 
UAV operations include: 

Payload 

Most RTF and BNF UAVs have a limited 
payload capacity beyond that required for a 
gimbal, camera and battery. Those with larger 
capacity payloads are UAVs aimed at carrying 
a broader range of imagery capture hardware, 


such as LiDAR or infrared camera, or other 
environmental sensors. Despite some high- 
profile interest, such as Amazon’s nascent 
Prime Air service, logistics and transport 
companies have not embraced the use of 
UAVs because many commercially available 
platforms have insufficient carrying capacity for 
goods. 

Range 

Commercially available UAVs are generally 
limited in range by signal transmission and 
image relay distance and battery power (flight 
time). This means a pilot must be within a 
particular proximity of the UAV and that flights 
cannot span a significant distance. Flight 
time due to power constraints can be partially 
managed by interrupting flights for battery 
changes. 


Model 

Weight 

Payload 

Flight 

time 

Range 

Max 

speed 

Camera 

Operating 

conditions 

Price 

Parrot BeeBop 

0,4 kg 

■ 

■ 

250 m 

(extendable) 

29 mph 

Yes 

(14MP) 

Dry 

conditions 

only 

£700-900 

(RTF) 

Blade 350 QX2 

i kg 

0,2 kg 

10 mins 

1000 m 

32 mph 

Yes 

Dry 

conditions 

only 

£200-300 

(RTF) 

3DR IRIS-4- 

0,9 kg 

0,2 kg 

■ 

800-1000 m 


Yes 

Dry 

conditions 

only 

£500-600 

(RTF) 

DJI Phantom 2 Vision + 

1,2 kg 

0,2 kg 

25 mins 

600 m 

33 mph 

Yes 

(14MP) 

Dry 

conditions 

only 

£800-1200 

DJI Phantom 3 

Professional 

12 kg 

0,3 kg 

28 mins 

1900 m 

35 mph 

Yes 

(12MP) 

Dry 

conditions 

only 

£1,000-1,200 

Walkera Scout X4 

1.7 kg 

0,5-10 kg 

25 mins 

1200 m 

40-50 

mph 

Yes 

Dry 

conditions 

only 

o 

o 

lo 

o 

o 

Yuneec Q500 Typhoon 

11 kg 

0,5 kg 

25 mins 

600 m 

54 mph 

Yes 

(12MP) 

Dry 

conditions 

only 

£900-1100 

(RTF) 

SkyJib-X4 XLTi-QR 

IS kg 

7,5 kg 


3,000-25,000 

m 

24 mph 


Wind 

£7,500-8,000 

Altura Zenith ATX8 

3.1 kg 

2,9 kg 


1000 m 

44 mph 


Light rain/ 
snow 

£15,000- 

20,000 

MicroDrones MD4-1Q00 

2,65 kg 

1,2 kg 

88 mins 

5,000 m 

28 mph 

Yes 

Light rain/ 
snow 

£20,000- 

30,000 
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Weather proofing 

Most low-end and mid-level commercial 
UAVs have limited operating conditions. 

The ability to operate in a broader range of 
weather conditions, such as high winds, rain 
and snow, is generally found in the more 
expensive commercially available drones, as 
weather hardening adds weight, which has 
cost implications. Compared to military-grade 
UAVs, such as AeroVironment’s Puma AE (All 
Environment) model, commercial UAVs have a 
limited ability to operate in harsh, unpredictable 
and extreme climatic environments. 

Commercial UAV users could retrofit weather 
hardening to drones, though the extra weight 
would likely reduce flight time and payload 
capacity unless power or the number of rotors 
was also increased. 

Imaging 

Most UAVs have medium- to high-resolution 
cameras (at least 12 megapixels) and the 
ability to capture both stills and video. The use 
of a gimbal can allow manual and electronic 
camera rotation, providing greater situational 
awareness. Civilian UAV operators can install 
LiDAR and infrared cameras on UAVs. 

Automated and programmable piloting and 

Most commercially available drones can be set 
to fly a predetermined flight path based on GPS 
coordinates (fly-by-wire). Newer models also 
have Follow Me autopilot settings that enable 
the UAV to automatically follow the operator. 

Unmanned ground vehicles 

Unmanned ground vehicles have been 
available for several decades. The simplest 
example, as reportedly used by Islamic State 
(IS) in Iraq, is the familiar remote controlled car. 
At the other end of the spectrum, the first fully- 
autonomous road vehicles for the commercial 
market and advanced military robotics are 
being developed. 

There are two categories of UGVs. The first 
are remote controlled vehicles piloted by 
humans who are in full control of the vehicle 
but driving it but from a distance. These include 
the Modular Advanced Armed Robotic System 
(MAARS) used by the US Army. The second 
are autonomous drones that drive themselves 


using algorithms, sensor inputs and pre-set 
waypoints. These include the Mobile Detection 
Assessment and Response System (MDARS) 
used by the US Army and Navy, and the 
Google Self-Driving Car Project. 

UGVs have a large range of applications - from 
hobbyists using remote controlled cars for 
entertainment and leisure to the military using 
vehicles capable of operating in dangerous 
regions and environments, including for 
disarming explosives. 

For the hobbyist, commercially available small 
remote controlled cars can travel up to 35 mph 
over rough ground, cost between £40 and 
£1,200, and can drive for 15 to 90 minutes over 
relatively short distances. They tend to have 
very limited payloads but could be customised 
to include cameras. In contrast, the military and 
defence sector use of UGVs is well established 
and increasing. This includes vehicles such as 
the RipSaw, a commercially available UGV the 
US Army equipped with weapons and used in 
Iraq. The Ripsaw is priced at approximately 
$250,000 (£165,000) and is capable of driving 
at up to 95 mph, carrying a 900 kilogram 
payload. The US Army used over 6,000 UGVs 
in Iraq and Afghanistan for ISR missions 
and counter-1 ED tasks. 6 South Korea is also 
reportedly using stationary armed surveillance 
‘robots’ in the demilitarised zone along the 
border with North Korea. While there is limited 
commercial availability of military-grade UGVs, 
variants of models such as the I-Robot 110 
and Mil-Sim A5 Robotic Weapon may enter a 
broader commercial market in the future. 

Due to the wide range of variations and 
capabilities, it would be possible to customise 
or purchase a UGV capable of carrying either 
explosive payloads or cameras for relatively 
modest prices and logistical difficulty. However, 
it is worth noting that a comparable manned 
vehicle would be significantly cheaper. 

Specifications affecting hostile UGV 
operations 

There are only a limited number of UGV 
specifications affecting operations that are 
applicable to all classes of UGV. The diversity 
in technological capabilities makes pinpointing 
operational limitations challenging. 


8 http://www ; isn. eihz, ch/Digital-Library/Articles/ 

Detail/?id-188583. 
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Mobility and speed 

UGVs can move across ground terrain in a 
range of modes and vehicle configurations. 
There is an important relationship between 
the ability of a UGV to move across diverse 
all-terrain environments, such as hills, 
obstructions, semiaquatic or flooded areas and 
uneven surfaces, and the speed with which a 
vehicle can move. For example, the average 
remote controlled car may have a reasonably 
high top speed but be unable to traverse 
uneven terrain very well. On the other hand, 
counter-1 ED UGVs with caterpillar tracks have 
a far greater capacity to negotiate diverse 
terrains but at much lower speeds. 

Imaging 

UGVs, particularly smaller vehicles that 
operate low to the ground, provide only limited 
situational awareness to operators, particularly 
in contrast to UAVs. Without telemetry systems, 
navigation based solely on video stream is 
likely to significantly limit the effectiveness of 
some UGVs. While UAVs provide superior 
visual situational awareness from a distance, 
UGVs fitted with more advanced environmental 
sensors, such as thermal imagers and chem- 
bio sensors, may offer operators a more 


thorough understanding of on-the-ground 
environments. 

Payload 

The payload capacity of UGVs varies widely. 

As with most types of unmanned vehicles, 
there are obvious speed and mobility to 
payload weight trade-offs. In most instances, a 
commercial UGV or remote controlled car will 
have a higher payload capacity than hobbyist 
UAVs, but the UAV operator has greater visual 
awareness and manoeuvrability. 

Range 

Most remote controlled UGVs have limited 
range, though higher end models used by 
special operation forces are likely to be tailored 
for specific missions. Ranges for counter-IED 
and bomb disposal operations are likely to be 
based on average blast radius. For models 
used in hazardous material inspection or site 
contamination, a range of one kilometre should 
be sufficient to protect the operator. The range 
a hostile operator will require is dependent 
on the level of risk they are willing to expose 
themselves to depending on the target. In 
reality, the effective range is also dependent on 
the type of terrain the vehicle has to travel over 
to reach its target. 


Model 

Weight 



Max 

speed 


Components 

Price 

Happy Cow 777-270 
hSpy 

1SS g 

Limited 

30 m 

n/a 

HD video/still 

camera 

None 

£30 

Jumpshot MT 

n/a 

All terrain 

100-200 m 

27 mph 

No 

n/a 


Savage XL Octane 
RTR 

7 kg 

AII terrain 

100-200 m 

38 mph 

No 

n/a 

£775 

Mil-Sim A5 Robotic 
Weapon 

■ 


■ 

50 mph 

IR/low lux with 
night vision 

Armed with lethal or non- 
lethal monitions 

£2,500- 

6,500 

1-Robot 110 First 

Look 

2.5 kg 

All terrain 

Ail weather 
Waterproof 

200 m 

3 mph 

4 built-in 

cameras 
(front, rear 
and side- 
facing) 

Can add specialised 
cameras, thermal imagers, 
chem-bio sensors and 
charge deployment 
accessories 

£13,000- 

£15,000 

MATILDA (Mesa 
Associates 5 Tactical 
Integrated Light- 
Force Deployment 
Assembly) 

28 kg 

All terrain All 
weather 

1,200 m 

2 mph 

Pan-tilt zoom 

camera 

68 kg payload capacity with 
adaptable configurations: 
sensor, attack and 
manipulate 

£15,000 

Modular Advanced 
Armed Robotic 

System (MAARS) 

■ 

Ail terrain Ail 
weather 

800-1,000 

m 

7 mph 

Drive and 
gunnery 

cameras 

with thermal 
imaging 

Armed with lethal or non- 
lethal munitions 

n/a 
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Unmanned marine vehicles 

Unmanned marine vehicles are available in 
two main classes: underwater and surface 
platforms. The majority of UMVs fall into the 
first category. These underwater vehicles 
are designed for two principal commercial 
applications: marine research and offshore oil 
and gas sector activities. The 2014-15 search 
for missing Malaysia Airlines flight MH370 
demonstrated a further novel application 
of UMVs for search and recovery. The 
Association for Unmanned Vehicle Systems 
International (AMVSI) has identified over 
745 UMV platforms, with an estimated 75% 
in some stage of development, manufacture 
or deployment. 7 In 2013, there were 115 
active UMV platforms available in the United 
Kingdom. 8 

The market for UMVs is smaller than the UAV 
market, as it lacks the high levels of hobbyist 
uptake and is far more reliant on commercial 
usage. The civilian market is restricted by the 
very limited capabilities of lower priced entry- 
level models. However, expensive drones with 
broader capabilities are becoming more readily 
available. The cost of an advanced underwater 
UMV can reach more than £1 million. UMVs in 
this price range have the ability to travel at a 
depth of 4,500-6,000 metres for up to 28 hours 
and over a distance of 100 miles. 9 Market 
research from March 2014 estimated that 
the global market for remotely-operated and 
autonomous UMVs would be £1.08 billion that 
year, growing to £3.15 billion by 2019. 10 

The two key operational attributes of 
underwater UMVs are range and dive depth, 
with cheaper models requiring a cable 
connection in order dive below the surface. 
Most underwater drones have a limited payload 
(less than 10 kilograms) because of the need 
to remain buoyant, and are used for visual 
or sonar imaging and collection of scientific 


7 https://higheriogicdownload s3. am&ion&ws . 
com/AUVSl/b657da80-1a58-4f8f-9971-7877b707e5c8/ 
UpioadedFiles/A U VSIUMVCore Capabilitles08-08-1 3, pdf 
Note , the remaining 25% of platforms are either inactive 
(10%) or insufficient information is available to determine 
production or operational development (15%). 

8 https:7/higheriogicdownload , s3. amazonaws. 
Gom/AUVSl/h657da80-1a58-4f8f-9Q71-7877b707e5c8/ 
Upio8dedFiiesfAUVSIUMVCoreC8pabiiities08~08-13.pdf (p. 
5). 

9 http://www. ihs . org. uk/documents/ths. org. uk/ 
downioads/shaiiowwater_auv_and_usv.pdf. 

1Q http://www. prnewswire . com/ne ws-r&ieasesZ 

unm8nned-underwater-vehic!&s-market‘Worth-484-biiiion- 

hy~2019~252903Q11.html. 


data. Surface UMVs are dependent on 
speed, payload and range (a ‘control triangle' 
comparable to the naval architects’ ‘iron 
triangle’ of speed, payload and endurance). 11 
They are capable of carrying up to 1,000 
kilograms of explosives, such as was used 
in the non-drone attack on the USS Cole in 
October 2000 in Yemen. 

Cheaper drones and those operating nearer 
to the surface are controllable by Wi-Fi up to a 
range of 300 metres, giving a pilot direct control 
over the drone. However, the majority of high- 
end submersible models move using a GPS- 
based system of waypoints. It is still possible 
for a pilot to maintain some level of control 
by changing the drive-to GPS coordinates 
or depth levels via acoustic messages and 
satellite communication; however, this form of 
control is limited at best, and the pilot could 
not, for example, navigate a submersible drone 
through a confined space. Due to the high 
cost and variable commercial use, underwater 
marine drones tend to be highly customisable. 
Features such as the basic outer shell, 
navigation, energy and propulsion components, 
and payloads, such as cameras or sonar 
equipment, are customisable. 

Specifications affecting hostile UMV 
operations 

There are several factors that affect UMV 
operations. Typically, higher-cost drones 
feature significantly greater payload capacity, 
imaging capability, range and depth than lower- 
cost drones. 

Payload 

Payload capacity is affected by two factors: 
internal space and the buoyancy of the 
drone. A payload that is above the buoyancy 
weight will cause the drone to sink at a rate 
proportional to the weight variance. A payload 
below the buoyancy can be offset by the 
drone’s navigation facilities, including filling 
the buoyancy tanks to achieve a neutral 
level. Any space left in the payload chamber 
of underwater UMVs can be filled with high 
buoyancy foam to increase the potential 
payload weight. Higher-end UMVs will have 
more space for packages as well as higher 
natural buoyancy levels. The entry level drones 
may lack any payload capacity. 


11 http://www ,; rand ’ org/content/dam/rand/pubs/ 

research_reports/RR300/RR384/RA ND_RR384. pdf 
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Speed is determined by the engine output and 
the shape and weight of the craft. The engine 
output of underwater models is very low, with 
top speeds in the region of 3-6 mph (similar to 
jogging speed). The higher end of the market is 
more focussed on delivering endurance rather 
than speed. In contrast, speed is key factor for 
surface drones, which can reach speeds of up 
to 30 mph. 

Imaging 

Imaging technology tends to be placed into 
the payload chamber in DM Vs. This can range 
from scientific instruments measuring changes 
in pressure or water quality, to sonar equipment 
and visual capabilities. The latter allows drones 
to be used for surveillance or reconnaissance 
of critical infrastructure, such as oil rigs or 
offshore military equipment, including naval 


Range 

The range of a drone is not determined by 
controller range if the UMV is capable of 
satellite or GPS communication. If this is the 
case, provided the drone remains in contact 
with the GPS network, the range is determined 
by the fuel capacity (generally electric batteries) 
and optimal speed. A drone able to travel at 3 
knots (3.45 mph) for 25 hours has an effective 
range of 86.25 miles. If GPS communication 
is not possible, the drone is typically limited to 
either Wi-Fi controller ranges (typically up to 
300 metres) or a physical cable connecting it to 
a pilot (typically less than 100 metres long). 

Depth 

Due to the pressure placed on a vehicle that 
descends under the water and the hazards 
of water damage on electrical components, 
the shell of a drone determines the depth to 
which it can travel. Drones with shells made 
of higher strength metals, such as titanium, 
are able to travel deeper than those made of 
cheaper metals or plastics. Depth is not a factor 
when UMVs are deployed against surface 
targets, but some critical infrastructure targets 
have significant depth, such as oil lines and 
platforms or communications cables. 


Mode! 

Weight 

Payload 

Fuel capacity 

flax speed 

Camera/ sonar 

Price 

C-Targef 3 

325 kg 

0 kg 


23,7 mph 

Yes 

£POA 

AutoNaut 3,5 

120 kg 

40 kg 

20 litres (plus 
solar panels) 


Yes 

£POA 

Auto N a ut 5 

230 kg 

130 kg 

20 litres (plus 
solar panels) 

4.8 mph 

Yes 

£PGA 


Model 

Weight 

Buoyancy 

Operation 

time 

Range 

Depth 

Max speed 

Camera/ 

sonar 

Estimate 

price 

Hydro View 
Pro 5M 

8.4 kg 

■ 

180 mins 

0.046 miles 

100 m 
(attached 
to cable) 



$10,000- 

15,000 

(£6,500- 

9,700) 

Remus-100 

37 kg 



BH 

100 m 

5,18 mph 


$250,000 

(£163,000) 

Bluefin-21 

750 kg 

7,3 kg 

1,500 mins 

88,25 miles 

4 ; 5QG m 

3.45 mph 

Yes 

$2.5 million 

(£163 

million) 


A review of the known use of drones by various 


Hostile drones: The use of civilian drones by non- 


?A0326651_12-000012 






























































terrorist, insurgent, criminal, corporate and activist threat groups around 
the world has identified two principal categories of hostile use: attack and 
intelligence gathering. There are particular concerns that that drones will 
be used as simple, affordable and effective airborne Improvised Explosive 
Devices (lEDs). Governments are also concerned by the decentralisation 
and democratisation of intelligence, surveillance and reconnaissance 
(ISR) capabilities made possible by the widespread availability of drones. 
In contrast, this is a development that is welcomed by activists working 
to hold governments and corporations to account A brief summary of the 
review is presented in the following pages. The majority of drones used 
are unmanned aerial vehicles, as they are more readily commercially 
available and offer more options than land- or sea-based platforms. 

Lone wolf 

There are many examples of individuals using drones for purposes 
beyond authorised and accepted use, and these suggest scenarios for 
future lone wolf attacks. 

In September 2011, a 26-year-old American man was arrested by 
undercover FBI agents planning to fly explosives-laden model aeroplanes 
into the Pentagon and US Capitol and rig mobile phones to detonate 
improvised explosive devices (lEDs). In January 2015, an off-duty 
employee of the US National Geospatial-Intelligence Agency lost control 
of a friend’s DJI Phantom quadcopter, which then crashed onto the White 
House lawn. The incident raised concerns about the extent to which 
the Secret Service is prepared for drone activity. Four months later, a 
man was arrested for trying to fly a Parrot Bebop drone over the White 
House fence. In France, unidentified drones have been flown over the US 
embassy, the Eiffel Tower, the Invalides military museum, the submarine 
communications base at Sainte-Assise, the Place de la Concorde, the 
Elysee Palace and multiple nuclear power stations. In June 2014, an 
unidentified drone was used to monitor the French national football team 
during a closed training session at the 2014 World Cup in Brazil. In July 
2014, an unidentified drone came within six metres of an Airbus A320 
as it landed at London’s Heathrow Airport, prompting the Civil Aviation 
Authority to issue new safety guidelines, known as the ‘dronecode’. In 
October 2015, an unidentified drone crashed into the Sydney Opera 
House. 

Fortunately, there has so far been very few instances of individual 
terrorists using drones to undertake attacks. What could be was 
demonstrated in April 2015 when a man landed a drone on the Japanese 
prime minister’s office in Tokyo. The drone was carrying a bottle 
containing radioactive sand from Fukushima, which was emanating up to 
1,0 microsievert per hour. 

In a response to a freedom of information request by Open Briefing, the 
Metropolitan Police Service revealed that between January 2013 and 
August 2015, 20 suspicious drone related incidents had been recorded 
in and around London. 12 Sixty per cent of the disclosed incidents 
related to air navigation orders where civil aviation requirements had 


12 https://www. whatdotheyknow. com/r&quest/count&r_drone _ 

meastjresMmcommg-702242, 
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been breached; the rest related to criminal or 
illegal activity. In one case, a UAV was used 
to smuggle drugs into a prison and in another 
case a drone was flown over 200.000 people 
on 20 December 2014. 

Terrorist organisations 

The Lebanon-based militant group Hezbollah 
has the longest history of drone use by a non¬ 
state group. Hezbollah reportedly maintains 
a small fleet of LIAVs, including Iranian Ababil 
and Mirsad platforms and their Hezbollah 
derivatives. 13 Some reports estimate that the 
fleet includes upwards of 200 platforms for ISR 
and combat missions. 14 In November 2004, 
Hezbollah allegedly flew an Iranian UAV over 
parts of northern Israel before returning to 
Lebanese territory. In August 2006, Hezbollah 
launched three small Ababil drones, some 
allegedly carrying explosive payloads, with the 
intention of attacking Israeli military targets. 

The drones were shot down by Israeli F-ISs. In 
October 2012, Hezbollah allegedly flew a small 
Ayub drone 35 miles into Israeli airspace with 
the intention of undertaking reconnaissance 
on a nuclear reactor. An Israeli aircraft shot the 
drone down before it returned to Lebanon. 

More recently, it is possible that Hezbollah 
has more consistent access to Iranian UAVs, 
including the Ababil-3, and are using UAVs 
against al-Nusra Front fighters in Lebanon. 

In September 2014, the Fars News Agency 
reported that Hezbollah had achieved its first 
successful drone strike, killing an estimated 
23 'Syrian rebels’. 15 In April 2015, IHS Jane’s 
published evidence of a Hezbollah UAV airfield 
in the northern Bekaa Valley, Lebanon, that 
included a UAV ground command station. 16 
The group is thought to be continuing to use 
UAVs for ISR in the border region between 
Syria and Lebanon. 

Al-Qassam Brigades, the military wing of the 
Palestinian organisation Hamas, is suspected 
of having a small fleet of UAVs and a crude 
production workshop. During Operation 
Protective Edge in 2014, Israeli forces shot 


13 https;//medium.. oomAvans-boring/this- 
new-airstrip-couid-be-home-to-hezboifah-s-dron&s- 
bdec97ff38a8. 

14 hitp;//www.yn&tnews.com/ 
artici&s/0 , 7340, L-4457653,00. htmL 

15 hifps://www.youtub &. com/ 
watch ?v-gUSGNAp!9XQ. 

18 hitpJZwww, janes. oom/artide/50922/hizbuiiah- 

airstrip-revealed . 


down a potentially armed Hamas-controlled 
Arbabil-1 UAV with a Patriot surface-to-air 
missile. Al-Qassam Brigades advised that the 
drone was only one of three that breached 
Israeli airspace, though the Israeli military deny 
this claim. In December 2014, a drone flyover 
of a Hamas military parade resulted in Israel 
scrambling fighters that returned to base after 
the drone did not enter Israeli airspace. 

More recently, Al-Qassam Brigades announced 
that it had captured an Israeli Skylark 1 that 
came down in Gaza in July 2015. The group 
claimed that the drone had been repaired 
and was operational. Al-Qassam Brigades 
also claims to have developed three UAV 
platforms, two with combat payloads and one 
for surveillance. 

The extremist militant group Islamic State were 
shown to be using DJI Phantom UAV platforms 
in Fallujah, Iraq, from early 2014. While the 
early demonstrations of commercially available 
drones appeared to be for propaganda 
purposes only, there is emerging evidence that 
these platforms are now providing actionable 
ISR and target acquisition capabilities to 
Islamic State. 17 There are some indications 
that IS used hobbyist drones to gain situational 
awareness ahead of the campaign to capture 
the Tabqa military airfield in northern Syria in 
August 2014. In March 2015, US military forces 
launched an airstrike against an IS militant who 
had been flying a UAV over Fallujah. In April 
2015, Islamic State released a video showing 
UAVs being used for reconnaissance and 
battlefield coordination during its assault on the 
Baiji oil refinery complex in Iraq. 18 In May 2015, 
the Kurdish Peshmerga shot down an IS drone 
that had been filming their positions. In August 
2015, there were reports that Kurdish soldiers 
had captured a remote controlled car carrying 
explosives that had failed to detonate. In the 
same month, US Central Command released 
a list of airstrike targets around the world, 
including ‘an ISIL drone' near Ramadi in Iraq. 19 

There are significant barriers to planning and 
carrying out a major terrorist attack of any 
sort. The intelligence work carried out by the 


17 https://medium. com/waNs-boring/islamic-state - 
has-drones-7827987c1755. 

18 http://www ; iongwarjournaL org/archives/2015/04/ 
islamic-state-uses-drones-to-coordinate-fighting-in-haijL 
php. 

19 http://www. Genicom . mii/en/newsZariides/augusb 
O-military-airsfrikes-continue-againstdsiRerrorisfsdn-syria- 
and . 
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British security services provides a robust 
line of defence against terrorist groups. There 
have been no known examples in the United 
Kingdom, Europe or the United States of 
terrorist organisations using drones for either 
attack or intelligence gathering. However, 
Islamic State is reportedly obsessed with 
launching a synchronised multi-drone attack on 
large numbers of people in order to recreate 
the horrors of 9/11. 

Insurgent groups 

Insurgent groups have many of the same 
capabilities and intentions as terrorist 
organisations, but do not face the same 
regulatory and law enforcement barriers 
to attacks on British interests as groups 
attempting to use drones to launch attacks 
within the United Kingdom. Drones therefore 
have the potential to become significant 
components of insurgents’ armouries. 

Obtaining aerial, ground and marine 
reconnaissance and attack capabilities would 
mark a step change for many insurgent groups. 

Donetsk People’s Republic (DPR) militias 
in eastern Ukraine reportedly possess and 
deploy sophisticated Russian-made Eleron- 
3SV drones for ISR campaigns. In contrast, the 
Ukrainian military has been using a range of 
modified and tailor-made hobbyist UAVs for ISR 
support. There are reports that the DPR militias 
are using signal jamming and GPS spoofing 
countermeasures against some Ukrainian 
drones; however, more advanced autopilot 
software in the tailor-made models is more 
resilient against these countermeasures. The 
Ukrainians have requested US military drones, 
such as Reapers, and jamming equipment and 
radar to better intercept the Russian-made 
drones. 

In August 2002, a Colombian Army unit 
allegedly discovered remote-controlled 
aeroplanes during a raid on a Revolutionary 
Armed Forces of Colombia (FARC) camp. The 
intended use of the aircraft remains unclear. 

Organised crime groups 

Mexican drug trafficking organisations (DTOs) 
have been documented using drones to 
smuggle illicit drugs across the US-Mexican 
border since 2010. The US Drug Enforcement 
Administration (DEA) has recorded around 
150 drone trips across the border since 2012. 


Nearly two tonnes of cocaine and other drugs 
are estimated to have been trafficked into the 
United States in this way, with an average 
of 13 kilograms of drugs per shipment. 20 In 
January 2015, a drone that crashed in Tijuana, 
Mexico, was carrying over three kilograms of 
methamphetamine. In August 2015, two men 
pleaded guilty to trafficking 12 kilograms of 
heroin across the US-Mexican border in the 
first cross-border seizure involving a drone. 

In the face of increasingly successful military 
and law enforcement operations against illicit 
drug smuggling in the early 1990s, Colombian 
drug cartels began to invest in producing narco¬ 
submarines as an alternate to small planes and 
go-fast boats. In August 2005, US authorities 
captured an unmanned semi-submersible in the 
Pacific Ocean. This was a torpedo-style cargo 
container, rather than a self-propelled vessel, 
which was towed underwater behind a boat 
and released if a patrol ship was spotted. The 
narco-torpedo would then release a buoy with 
a location transmitter system so that it could 
be retrieved later. In July 2010, the Ecuadorian 
police and navy found a jungle shipyard 
containing a 22.5-metre long narco-submarine. 
The advanced ‘supersub’ had a camouflaged 
hull made of Kevlar and carbon fibre and a 
cargo bay capable of holding over eight tonnes 
of cocaine. The high level of sophistication 
apparent in the various captured nacro- 
submarines and the huge resources available 
to the DTOs means that it is highly likely that 
they are now investing in remotely-piloted 
submersible vessels in addition to custom- 
made UAVs. 

Corporations 

There have been isolated examples of drones 
being used to obtain commercially sensitive 
information, such as drones flying over the 
filming of Game of Thrones in Ireland, Apple's 
new campus site being built in Cupertino 
in the United States and the BAE Systems 
facility in northern England that builds 
submarines for the Royal Navy. However, 
there have been no documented examples 
of corporations using drones for commercial 
advantage or espionage. However, there is 
a broad range of threat scenarios whereby 
drones are integrated into corporate espionage 
operations alongside cyber offensives and 


20 http://www. insighichme . org/ne ws-hh&fs/m&xJco- 

s-carteis-buMing^ustom-made-narco-drones-dea . 
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spear phishing campaigns. A likely scenario 
involves using drones as a means to deploy a 
malware payload over specific Wi-Fi networks. 
The leaked emails of Italian spyware vendor 
Hacking Team suggest that early concept plans 
for using drones for airborne malware delivery 
over Wi-Fi networks were being discussed with 
Insitu, a division of Boeing. 21 

One offensive scenario is the use of crowd 
control drones by British companies against 
strikers or demonstrators threatening foreign 
operations. An example of such a drone is the 
Desert Wolf Skunk, which is equipped with four 
high-capacity paint ball barrels that can fire a 
variety of ammunition, including pepper spray 
balls and plastic balls. The drones can be flown 
in formation by a single operator. In what the 
South African company calls a life threatening 
situation’, each drone can fire 80 balls per 
second, allowing for ‘real stopping power’. 22 
Desert Wolf reportedly sold 25 Skunks to an 
international mining company after a photo 
of the drone was featured on a military news 


Activist groups 

Although clearly not presenting a threat of the 
same type or magnitude as the other threat 
groups discussed in this briefing, activists 
have employed drones to support their political 
campaigns on a number of occasions. In 
September 2013, the German political party the 
Pirate Party flew a Parrot quadcopter towards 
the German chancellor, Angela Merkel, during 
a campaign rally in Dresden. 23 The stunt was 
in protest against the German government’s 
surveillance policies. In October 2014, Greater 
Albania activists flew a drone carrying the 
Greater Albania flag over an Albania-Serbia 
football match. 24 Greater Albanian’s claim 
territory from Albania’s neighbours, including 
Serbia. In July 2015, Women on Waves 
delivered pregnancy termination pills by drone 
from Germany to Poland to highlight restrictive 
abortion laws in Poland. Animal rights activist 


21 https://theintercept.com/2015/07/18/hacking- 
team-wanted-infect-computers-drone/. 

22 http://www. desert-wolf, com/dw/products/ 
unmanned-aenal-systems/skunk-riot-controi-copter.html. 

23 https://www. youtube, com/ 
watch?y=WcFiMCMbUHo. 

24 https://www. youtube, com/ 
watch ?v=hJSQf737Agw. 


groups have used UAVs to remotely capture 
farming, animal husbandry and animal 
testing practices in the United States. In April 
2015, a man protesting over the Japanese 
government’s nuclear energy policy landed a 
drone containing radioactive sand on the roof of 
the Japanese prime minister's office in Tokyo. 

Although the use of drones by activists is 
still uncommon, the most likely way in which 
drones will be used by such groups in future 
is in undertaking publicity-seeking exercises 
in front of the media or filmed using onboard 
cameras. Activists could also use drones 
to assist existing campaign efforts through 
reconnaissance and surveillance. 
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There are two theatres in which non-state actors could use drones as 
either an offensive weapon against the United Kingdom and its interests 
or as an intelligence gathering tool: 

1, The international theatre, consisting of all British military operations, 
embassies and commercial sites and operations abroad. These 

are vulnerable to attack by terrorist or insurgent groups or to being 
targeted by activist groups protesting against government policy or 
the actions of British corporations. 

2. The domestic theatre, consisting of critical national infrastructure, 
military sites, government buildings and tourist sites within the United 
Kingdom. These are vulnerable to terrorist attacks, disruption by 
activist groups or corporate espionage. 

There are three key defence scenarios, which range from easier to target/ 
easier to defend to harder to target/harder to defend: 

1. The long-term static target, such as a foreign embassy or nuclear 
power station. 

2. The temporary static target, such as a G7 summit or a speech by a 
politician. 

3. The mobile target, such a military supply convoy or the prime 
minister’s car. 

The UK government, police, military and security services will need to 
introduce countermeasures to reduce or mitigate the risk of commercially 
available drones being used for attack or ISR operations. These 
countermeasures need to be proportionate to the risk, economically 
and operational sustainable and balance interests relating to privacy, 
individual freedoms, safety and commercial interest. 

Drones are a unique technology providing users with significant 
capabilities. Defence system against illegal or harmful use of unmanned 


Regulatory countermeasures 

Point of sale regulations 
Civil aviation rules 

Manufacturing standards and restrictions 

Passive countermeasures 

Early warning systems 
Signal jamming 


Kinetic Mfflls 
Laser defence systems 
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vehicles should provide for ‘all hazard’ 
scenarios and multiple threat environments. 
However, time and resource investments 
should be prioritised for countermeasures that 
respond to the scenarios with highest risk (high 
likelihood/high impact). 

No single countermeasure is completely 
effective at limiting the hostile use of drones by 
non-state actors. The best strategy is therefore 
to employ a hierarchy of countermeasures 
encompassing regulatory countermeasures, 
passive countermeasures and active 
countermeasures. A high-level evaluation of 
the various countermeasures that are available 
is provided in the following pages. The focus 
is on unmanned aerial vehicles, as they 
present the greatest threat, but many of the 
countermeasures can be applied to unmanned 
ground and marine vehicles too, and where 
applicable countermeasures specific to these 
vehicles have also been considered. 

Regulatory countermeasures 

Domestic regulations can put in place a range 
of measures targeting the full supply chain 
and life cycle use of drones. Regulations 
would need to proportionate and balance a 
range of competing safety and commercial 
demands, including establishing procurement 
barriers for threat actors while at the same 
time encouraging innovative commercial 
use and maintaining easy access to suitable 
platforms for hobbyists. Specific regulatory 
countermeasures may include: 

* Point of sale regulations, including 
identification requirements for the purchase 
and sale of drones above a certain level of 
capability. 

♦ Civil aviation rules and licensing regimes 
to regulate the use of drones, with harsh 
penalty regimes for flying near critical 
national infrastructure and sites of national 
security importance. 

• Manufacturing standards and restrictions 
for UAVs, including no-fly zones built in to 
firmware and limits on carrying capacity 
and controller range. 

Procurement and import regulations 

The main international regulation relating to 
drones is the 1987 Missile Technology Control 
Regime (MTCR). The regime currently has 


34 members, and the UK government is a 
founding member. The MTCR aims ‘to restrict 
the proliferation of missiles, complete rocket 
systems, unmanned air vehicles, at id related 
technology for those systems.’ It is a voluntary 
association of countries that share the goal 
of ‘non-proliferation of unmanned delivery 
systems capable of delivering weapons of 
mass destruction.’ 25 

Regulations to stop the procurement and import 
of drones to the United Kingdom only cover 
those weighing more than 20 kilograms or are 
equipped to undertake any form of surveillance 
or data acquisition at time of purchase. 

Heavier drones require airworthiness approval 
and those capable of surveillance are more 
stringently regulated. This limited regulation 
means that drones weighing less than 20 
kilograms can be imported without license, 
despite many drones weighing 5-20 kilograms 
being capable of carrying explosives or camera 
equipment; for example, the SkyJib-X4 XL 
Ti-QR weighs 15 kilograms and can carry a 
payload of 7.5 kilograms. 

Civil aviation regulations on UAV licensing 
and use 

There are currently 32 countries using 
regulations to control the use of drones 
domestically, particularly unmanned aerial 
vehicles. The scope and scale of the 
regulations range from altitude or weight limits 
to a complete ban on all unmanned aerial 
vehicles. Regulation in the United Kingdom 
is limited. Drones of any size or weight are 
permitted, though they must be used within the 
visual sight line of the pilot. In general, UAVs 
cannot be flown above 400 feet in altitude 
without special permission and must remain 
clear of controlled airspace without Air Traffic 
Control permission. Commercial operation 
requires a license, which is given to an operator 
for a particular class of UAV (small fixed wing 
or small multirotor). 26 

In contrast, some countries maintain a 
complete ban, while others have stringent 
rules similar to those in effect in South Africa. 
South Africa has a well-developed series of 
regulations on UAVs, with some of the strictest 
rules in the world short of an outright ban. The 
operators of drones must have a valid remote 


25 http://www ; niter ; info/englishA 

26 https://www, caa, co, uk/default 
aspx ?catid- 1995&pageid-18012\ 
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pilot license and drones cannot be operated 
without a letter of approval from the director 
of the South African Civil Aviation Authority, 
which is valid for 12 months. Drones must not 
be flown near nuclear power plants, prisons, 
police stations, crime scenes, law courts, 
critical national infrastructure or strategic 
installations. Regulations also prohibit drones 
from being flown in formation or swarm, flown 
directly overhead or within a lateral distance of 
50 metres of a person or crowd, or within 50 
metres laterally of any structure or building. 27 

There is a vigorous debate between the 
innovators, users and regulators. The former 
argue for a more laissez faire approach to 
allow the rapid development of the civilian 
drone market. They argue that if the rules of 
use become restrictive now, this could smother 
the sector before it properly established. 
Conversely, others argue that if the rules are 
too relaxed there is a high probability of misuse 
with potentially disastrous consequences. As 
usual, a compromise needs to be found. 


The Chinese UAV producer DJI has built safety 
features into the firmware (the permanent 
software programmed into read-only memory) 
used by its drones. The firmware maintains 
several No Fly Zones based on the GPS 
coordinates of the pilot’s location. There are 
around 350 No Fly Zones worldwide. 28 These 
zones are primarily designed to keep drones 
away from airports. Furthermore, within eight 
kilometres of a no-fly zone, the pilot is unable to 
set an automatic fly-to waypoint, forcing them 
to remain in manual control of the drone near 
these zones. 

The No Fly Zone is currently a limited-use 
tool implemented to protect airports; however, 
legislation could be implemented to extend the 
measure to protect other key sites. In January 
2015, DJI reported that it is considering 
implementing such a zone over Washington DC 
after one of their drones crashed onto the lawn 
of the White House. In theory, the firmware 
updates to protect these sites could be hacked 
and bypassed, but this would require specialist 
knowledge not likely to be held by most solo 
attackers at least. The company is also working 


2 7 http://www, ihedron&mfo , com/south-africa-drone - 

regulationsZ 

28 h ttp:Mheua vdig&st, com/uavQSS-no-fiy-zones-fbr- 

uavs/ 


to prevent criminals from using workarounds to 
circumvent such security features. 

This would make it very difficult for individuals 
without the technical knowledge of computer 
programming and the criminal links to illegally 
import drones to be able to acquire and fly 
drones near sites that have been marked as 
needing protecting. In effect, this limits the lone 
wolf terrorist, and sends a clear message to 
activists and businesses of what the legal and 
illegal uses of drones are. 

Passive countermeasures 

Early warning systems 

There are several early warning systems that 
can identify a drone within a defined area. 
Traditional technology such as radar and 
CCTV can be effective, but new commercial 
systems are being developed that specifically 
alert operators to the presence of drones. Such 
commercial systems include: 

DroneShield is developing a system that 
contains a database of common acoustic 
signatures unique to drones. If a drone 
is detected, DroneShield instantly alerts 
security officers via text message, email 
or through an existing alarm system. The 
system was deployed at the 2015 Boston 
Marathon. DroneShield technology is 
also available for cars and vans, allowing 
a VIP convoy to implement such a 
detection system. 

Domestic Drone Countermeasures 
is developing personal and commercial 
detection systems that can detect radio 
frequency transmitters and triangulate 
moving transmitters. The system 
consists of a primary command and 
control module that can communicate 
with radio frequency sensor nodes up to 
60 metres away, with each node typically 
able to detect drones within 15 metres in 
all directions. 

Dedrone has developed the 
DroneTracker multi-sensor detection 
system, which uses an array of sensors 
to detect civilian drones in real time. The 
system uses microphones, a daylight 
camera and an infrared camera to track 
drones within a 100 metre radius, which 
can be extended by deploying the units 
in series. 
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Although commercial systems have the 
potential to be very effective against civilian 
drones, military-grade systems include 
electronic warfare and radar capabilities that 
make them far more effective against advanced 
drones. As the counter-drone market grows, 
defence companies may begin offering scaled 
down versions of their military systems for use 
by businesses and high-net-worth individuals. 

A comprehensive early warning system would 
use a combination of acoustic detectors, 
thermal imaging sensors, cameras and radar. 
This would allow a drone to be detected, 
tracked and identified by target sites. However, 
many sites lack sophisticated detection 
capabilities, such as radar, and it would be 
costly to install them. Companies such as a 
Dedrone are developing cost-effective and 
drone-specific alternatives. In some high-value 
targets, such as military bases or Whitehall, 
radar could be installed, but investing in 
commercial systems alone would be sufficient 


Once an early warning system detects a 
drone, popular drone control frequencies can 
be blocked around the target using a radio 
frequency jammer, such as the RCJ40-D or 
PR045 High Power (civilian) or JAM201 or 
GM20 (military). It is also possible to block 
these frequencies at all times, though this 
would make mobile phone communications 
in and around the site difficult. However, 
a drone user can use a wireless intrusion 
prevention system to alert them to attempted 
jamming. Advanced radio receivers can use a 
multi-spectrum frequency set that alternates 
through little used frequencies meaning 
that the receiver is harder to block. Military- 
grade jammers can block a wider spectrum 
of frequencies. However, frequency jamming 
is illegal in the United Kingdom without 
permission. 

By implementing no-fly zones around critical 
infrastructure, any drone detected can be 
assumed to be malicious and the controller 
frequencies could be blocked. However, if a 
threat actor is able to hack the firmware to 
override the inbuilt no-fly zones, they could 
place GPS waypoints within the defensive 
perimeter. If the drone was detected and 
controller frequencies were blocked, the 


drone operator would be unable to change 
the coordinates or have any control over the 
aircraft; however, the drone would continue 
along its pre-determined route and still be 
able to strike a static target. What controller 
frequency blocking does is remove the threat 
actor’s ability to guide the drone onto a mobile 
target or target of opportunity or to take evasive 
action against any active defence systems. 

GPS jamming is also needed in order to 
interfere with the GPS radio signal or undertake 
a spoofing attack to change the drone’s 
perceived coordinates and either take control of 
the vehicle or cause it to crash land. 

A possible alternative method for taking control 
of a drone was revealed in January 2015 
when a security researcher claimed to have 
developed the world’s first drone malware: 
Maldrone. The Python script is loaded to the 
drone over a local Wi-Fi network and can 
turn off the drone’s autopilot system and take 
control remotely. 29 However, drone malware is 
currently very limited, and requires the specific 
model of the targeted drone to be known. The 
Maldrone demonstration does offer an idea of 
what might one day be possible though. 

Active countermeasures 

Kinetic defence systems 

For those drones that remain a threat after 
the controller frequency and GPS have been 
blocked, the last barrier of defence in the 
hierarchy of countermeasures are systems 
capable of destroying hostile drones. This 
includes kinetic weapons, such as missiles, 
rockets and bullets. 

Israel’s Iron Dome air-defence system has 
been tested for its counter-UAV capabilities, 
and according to some sources can destroy 
armed drones before they are in attack range. 
Less-advanced kinetic defences use rockets 
or bullets and require line of sight, meaning 
a drone can get much closer to the target. 

All kinetic systems present a risk of collateral 
damage if deployed in a populated area. 
Missiles and rockets fired at UAVs could cause 
catastrophic damage if they miss their target. If 
the drone is hit, shrapnel and wreckage could 
still cause casualties on the ground. The blast 
radius from a missile or rocket fired at a UGV 
could include civilians near the targeted drone, 
and bullets fired at UGVs could easily strike 

29 http://garage4hackers. com/entry ; php ?b~31 05. 
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passersby. 

Less risky commercial options include non- 
lethal projectile weapons that fire blunt force 
rounds, such as bean bags or rubber bullets, 
or small portable net guns that can ensnare 
drones. A consortium of British companies 
called Liteye has developed the Anti-UAV 
Defence System (ADDS) system that can 
detect and track drones using electronic 
scanning and radar then disrupt its operation 
with a brief, focused broadcast of directional 
radio frequency jamming. 

Laser defence systems 

Laser defence systems are being developed 
that have less chance of causing causing 
collateral damage than kinetic systems. For 
example, a Chinese consortium of companies, 
led by the China Academy of Engineering 
Physics, has developed a weapon system that 
can shoot down light drones at low altitude 
using a 10 kilowatt high energy laser. It has a 
1,2-mile range and is effective against aircraft 
travelling at up to 112 mph and at a maximum 
altitude of 500 metres. It can destroy the drone 
within five seconds of locating its target. Boeing 
is developing the truck-mounted High Energy 
Laser Mobile Demonstrator for the US Army 
and the Compact Laser Weapons System, 
which can be assembled in 15 minutes and 
destroy a drone in 15 seconds. 

Laser defence systems are still in development. 
However, once deployed and combined with 
an early-warning system, directed energy 
weapons could provide a useful counter to a 
hostile drone, particularly if radio frequency 
jammers and GPS jammers have also been 
deployed to remove the pilot's ability to 
operate the drone. In this situation, the laser 
defence system would be working against an 
autonomous vehicle, making it easier to lock- 
on to and destroy. However, such systems 
might be of limited use in built-up areas, as 
they can only engage drones during times of 
line of sight, which may not be enough time to 
destroy the drone before it reaches its target. 
The fastest commercially available drones can 
travel at around 50 mph, meaning a drone 
could travel 112 metres in the five seconds a 
laser would take to destroy it. In a domestic, 
urban setting, this makes such systems most 
suited to the defence of static targets with clear 
lines of sight. 
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It is estimated that around 200,000 civilian-use drones are being sold 
worldwide every month. 30 Although they are currently expensive, ever¬ 
more advanced drones capable of carrying sophisticated imaging 
equipment and significant payloads are readily available to the civilian 
market. Unmanned aerial vehicles currently present the greatest 
risk because of their capabilities and widespread availability, but 
developments in unmanned ground and marine vehicles are opening up 
new avenues for hostile groups to exploit. 

A range of terrorist, insurgent, criminal, corporate and activist threat 
groups have already demonstrated the ability to use civilian drones for 
attacks and intelligence gathering. The best defence against the hostile 
use of drones is to employ a hierarchy of countermeasures encompassing 
regulatory countermeasures, passive countermeasures and active 
countermeasures. 

Regulatory countermeasures can restrict the capabilities of commercially 
available drones and limit the ability of hostile groups and individuals to 
procure and fly drones. However, any new regulations controlling drones 
should be targeted and proportionate to the threat. The key specifications 
affecting drone operations are payload capacity, range, speed, depth (for 
UMVs), weather proofing, imaging and autopilot settings. Policymakers 
should pass stricter regulations limiting the capabilities of commercially 
available drones in the key specifications affecting hostile drone 
operations, particularly payload capacity. Particular attention should be 
paid to limiting the attack and ISR capabilities of UAVs and the attack 
capabilities of surface UMVs. Manufacturers should be required to install 
firmware that includes the GPS coordinates of no-fly zones around 
sensitive fixed locations. This would automatically shut down drones 
approaching these sites, thereby restricting malicious use. Finally, civilian 
operators of drones capable of carrying payloads should be licenced and 
the serial numbers of purchased drones registered. 

Passive countermeasures alert security to the presence of any drone 
within a no-fly zone or defensive perimeter around a static or mobile 
target. They limit the ability of hostile groups and individuals to guide a 
drone onto a mobile target or target of opportunity or take evasive action 
against any kinetic defences. The military has advanced systems that 
can track and destroy drones using radar, lasers and electronic warfare; 
however, the market for commercial and civilian early warning systems 
is at a nascent stage of development. The British government should 
support the research and development of commercial multi-sensor 
systems capable of detecting and tracking drones within a target area. 

The government should also make funding available to police forces 
and specialist units for the purchase of early warning systems and other 
passive drone countermeasures, including radio frequency jammers 
and GPS jammers. Radio frequency jammers are heavily restricted in 
the United Kingdom; however, such equipment could provide additional 
protection and security to vulnerable locations and individuals by blocking 
command signals to drones. Therefore, the government should relax the 
regulations restricting the use of radio frequency jammers for protection 
against hostile drone use around defined key sites. 


30 http:/Zdron&iife, com/2015/01/24/drone-sales- figures-/ 014-harduia vigate/ 
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Active countermeasures can be deployed 
against drones that still represent a threat 
despite passive systems being employed. 
However, the active countermeasures currently 
available for use in non-military settings are 
limited. Kinetic weapons - missiles, rockets 
or bullets - can be very effective, but present 
considerable risks of collateral damage if used 
in urban civilian areas. Less risky defences 
include laser systems or non-lethal projectile 
weapons and net guns, but these may not 
successfully destroy a hostile drone and require 
line of sight, which may be difficult in heavily 
built-up areas. Despite these limitations, the 
British government should support the research 
and development of innovative less-lethal 
anti-drone systems, such as directional radio 
frequency jammers, lasers and malware, and 
set out clear guidelines for the police and 
military use of kinetic weapons against hostile 
drones as a last line of defence. 

With active countermeasures still under 
development or presenting a high risk of 
collateral damage, the focus should be on 
the swift adoption of appropriate regulatory 
and passive countermeasures and increased 
funding for the research and development of 
effective active countermeasures. The most 
effective and cost efficient measures should 
be prioritised. The implementation of more 
expensive countermeasures for low likelihood/ 
high impact events involving drones will depend 
on the government’s risk appetite with regards 
to specific potential civilian, government or 
military targets. Combined with high-quality 
intelligence on the present threat of the hostile 
use of drones by various threat groups, the 
recommendations outlined in this report 
represent the best chance of countering the 
new and evolving threat from the hostile use of 
drones by non-state actors. 

However, such countermeasures are not 
foolproof. Furthermore, there is also the very 
real chance that, as with drones themselves, 
countermeasures will be deployed in turn by 
some threat groups against British police or 
military drones. The technology of remote- 
control warfare is impossible to control; the 
ultimate defence is to address the root drivers 
of the threat in the first place. 
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A I’appui de la strategie adoptee par le gouvernement du Canada pour assurer la resilience des 
infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) evalue et signale 
I’information relative aux menaces et a la criminalite dirigees contre les IE canadiennes. Ces 
renseignements ou ces elements d’information peuvent servir a proteger les IE du Canada. 
L’information contenue dans le present bulletin date du 20 janvier 2016. Les membres des 
organismes d’application de la loi font partie du secteur de la Securite et les militaires font partie 
du secteur des administrations publiques. Le gouvernement du Canada considere que ces deux 
secteurs sont des secteurs d’lE. 

CONTEXTE 

Le projet Tango de Google vise a changer 
radicalement la fagon dont les telephones 
intelligents et les tablettes interagissent avec 
leur environnement. Google a congu un 
appareil mobile dote de capteurs et de cameras 
tournes vers I'exterieur qui sont capables de 
faire un balayage des espaces et des objets 
environnants. Le prototype pourrait effectuer 
250 000 mesures par secondes. Le resultat: un 
ecran qui affiche des graphiques en 
trois dimensions extremement detailles qui 
reproduisent avec precision les specifications 

exactes des espaces et des objets a I’echelle humaine (echelle 1:1). Les graphiques 
affiches a I’ecran ne sont pas statiques. Les capteurs de suivi du mouvement de 
I’appareil detectent plutot les deplacements de I’utilisateur dans I’espace et ils peuvent 
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adapter les graphiques a 360 degres en fonction de I’emplacement ou de la position de 
I’utilisateur. 

Cette technologie permet aux utilisateurs : 

• de se deplacer dans des immeubles publics (p. ex. un centre commercial, un 
terminus ou une aerogare) pour localiser rapidement ce dont ils ont besoin ou 
I’endroit ou ils veulent se rendre; 

• d’obtenir rapidement des mesures exactes dans un espace donne; 

• de reconnaTtre et de tirer parti de nouveaux endroits apres avoir regu des photos 
par courriel; 

• d’enregistrer des cartes en 3D d’espaces interieurs pour les examiner plus tard. 

II est possible d’effectuer toutes ces fonctions sans avoir besoin d’un GPS ou d’autres 
signaux externes. 

Le 7 janvier 2016, une entreprise chinoise de haute technologie, Lenovo, a annonce 
qu’elle developpait le premier telephone intelligent equipe de la technologie Tango, qui 
sera offert aux consommateurs a I’ete 2016 au cout de 500 $. Google a deja lance sa 
trousse de developpement sur tablette pour le projet Tango, qui est principalement 
destinee aux developpeurs de logiciels. II est possible d’acheter cette trousse en ligne 1 
au cout de 500 $ et celle-ci est expediee sans frais. Au mois de juin 2015, plus de 
3000 de ces trousses sur tablette avaient ete vendues. A ce jour, le seul appareil 
equipe de la technologie Tango de Google est la tablette Yellowstone de sept pouces 
(photo ci-dessous). 
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EVALUATION 


Operations criminelles de la Police federate 

Ce document appartient a la Gendarmerie royale du Canada (GRC), Programme de securite nationale. II est expressement prete a votre organisme a titre confidentiel et aux fins d’usage interne 
seulement. II ne peut etre reclassifie, copie, reproduit, utilise en tout ou en partie ou diffuse a un plus large auditoire sans le consentement de I’auteur. II ne peut etre utilise dans des affidavits, des 
procedures judiciaires ou des citations a comparaitre ou encore a toute autre fin juridique ou judiciaire sans le consentement de I’auteur. Le traitement et I’entreposage de ce document doivent respecter 
les directives etablies par le gouvernement du Canada pour le traitement et I’entreposage des renseignements classifies. Si votre service ne peut pas appliquer ces lignes directrices, veuillez lire le 
document et le detruire. La presente mise en garde fait partie integrante de ce document et doit accompagner tous les renseignements qui en sont extraits. Si vous avez des questions au sujet des 
renseignements ou de la mise en garde, veuillez communiquer avec I’officier responsable de la Sous-direction des affaires criminelles relatives a la securite nationale, GRC 


Royal Canadian Gw\t&iW'arm roya e 
Mounted Fo co du Canada 


^A0326651 _3-000031 


3 



INDICATEURS DE COMPORTEMENT 


RECOMMANDATIONS 


L’ENIE encourage les destinataires du present document a signaler a leur service de 
police local toute activite suspecte ou criminelle. Pour signaler une activite suspecte, un 
cas d’extremisme criminel ou toute autre activite qui pourrait menacer la securite 
nationale du Canada, communiquez avec : 
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Reseau info-securite nationale : 1-800-420-5805 
Service canadien du renseignement de securite (SCRS): 613-993-9620 


Redige par: Equipe nationale des infrastructures essentielles 
Operations criminelles de la Police federale 
Courriel : SIR-SIS@RCMP-GRC.GC.CA 


1 https://store.google.com/product/project_tango_tablet_development_kit7hNfr 
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BULLETIN DE L’EQUIPE NATION ALE DES INFRASTRUCTURES 


MISE A JOUR : EXTREMISTES INTERNES (EMPL OY£ 'S DANS 

1 NDUSTR, E OR L A I ft A TION 


2016 - 02-10 


A I’appui de la strategie adoptee par le gouvernement du Canada pour assurer la resilience des 
infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) evalue et signale 
I’information relative aux menaces et a la criminalite dirigees contre les IE canadiennes. Ces 
renseignements ou ces elements d’information peuvent servir a proteger les IE du Canada. 

L’information contenue dans le present bulletin date du 10 fevrier 2016. Elle s’adresse 
essentiellement aux policiers, aux premiers intervenants et aux agents de I’application 
de la loi dans les aeroports ainsi qu’au personnel de securite des aero ports et des 
transporteurs aeriens. 

PRINCiPALES CONSTATATIONS 

• 

Cependant, en raison de la portee 

internationale de I’industrie aeronautique et de I’etat general de la menace, les agents de I’application 
de la loi et le personnel de la securite doivent rester au courant des tendances et des techniques qui 
ressortent de dossiers internationaux connus concernant des travailleurs de I’aviation. 
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CONTEXT t I 1 LIMITES 


En 2013, I’ENIE a presente une evaluation des tendances et techniques degagees de 
cas d’extremisme connus dans le secteur de I’aviation. 


(Priere de se reporter aux 

annexes A et B pour un guide et des sommaires illustres.) 

EVALUATION 


la portee internationale de I’industrie aeronautique et de 
I’etat general de la menace, les agents de I’application de la loi et le personnel de la 
securite doivent rester au courant des tendances et des techniques qui ressortent de 
dossiers internationaux connus concernant des travailleurs de I’aviation. 


• Selon les donnees, les complots d’attentats extremistes confirmes orchestras par 
des employes d’aeroports ou de transporters aeriens ont connu un faible taux de 
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reussite qui s’explique par le fait que les autorites 

sont parvenues a detecter et a dejouer la plupart d’entre eux. 1 

comme une tactique 

efficace qu’il vaut la peine d’adopter ou de remployer dans I’avenir. Devant un tel 
scenario, il devient de plus en plus primordial de detecter et de signaler les 
comportements suspects. 

INDICATEURS DE COMPORTEMENT 
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ii) Cas do wicalisation possibles 
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MESURES D’ATTENUATION POTENTiELLES 



Federal Policing Criminal Operations 

Ce document appartient au Programme de securite nationale de la Gendarmerie royale du Canada (GRC). II est expressement prete a votre organisme a titre confidentiel et aux fins d’usage interne seulement. II ne 
peut etre reclassifie, copie, reproduit, utilise en tout ou en partie ou diffuse a un plus large auditoire sans le consentement de I'auteur. II ne peut etre utilise dans des affidavits, des procedures judiciaires ou des 
citations a comparaitre ou encore a toute autre fin juridique ou judiciaire sans le consentement de I’auteur. Le traitement et I’entreposage de ce document doivent respecter les directives etablies par le 
gouvernement du Canada pour le traitement et I’entreposage des renseignements classifies. Si votre service ne peut pas appliquer ces lignes directrices, veuillez lire le document et le detruire. La presente mise en 
garde fait partie integrante de ce document et doit accompagner tous les renseignements qui en sont extraits. Si vous avez des questions au sujet des renseignements ou de la mise en garde, veuillez communiquer 
avec I’officier resoonsable des Ooerations criminelles relatives a la securite nationale. GRC. 


Royal Canadian G&ndarrrfrm roya e 
Mounted Po co du Canada 


n 


A0326651 5-000052 


5 









































































RECOMMANDATIONS 


L’ENIE encourage les destinataires du present document a signaler tout renseignement 
concernant des activites criminelles ou suspectes aux organismes d’application de la loi de leur 
region. Pour signaler une activite suspecte, un cas d’extremisme criminel ou toute autre activite 
qui pourrait menacer la securite nationale du Canada, communiquez avec : 

Reseau info-securite nationale au 1-800-420-5805 
Service canadien du renseignement de securite (SCRS) au 613-993-9620 


Redige par : Equipe nationale des infrastructures essentielles 
Operations criminelles de la Police federate 
Courriel: SIR-SIS@RCMP-GRC.GC.CA 
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ANNEX! B ' SOMMAIRES DE CAS D’EXTREMISME CONFIRM! S I 1 
SOUPCONNES DANS LE SECTEUR DE L’AVIATION 

S ® S .•¥% I ^ %# So»» fiW« S Sfc»» ^ ftxx# Sxxxx- io»« W I i I £ IS? 


• Le vol 159 de Daallo Airlines a quitte I’aeroport 
international Aden Adde de Mogadiscio, en Somalie, 
le 2016-02-16. Selon des sources, un presume 
kamikaze est monte a bord de I’aeronef et, 15 minutes 
apres le decollage, a fait sauter un explosif dont la 
deflagration a laisse une ouverture dans le fuselage. 

La video de surveillance prise avant le depart 
montrerait deux hommes remettant ce qui semble etre 

un ordinateur portatif au presume kamikaze apres le passage 
de celui-ci par la securite. Au moins un de ces deux hommes 
serait un employe de I’aeroport; il porte un gilet de securite de 
haute visibility orange. Au moins 20 personnes ont ete arretees 
en lien avec I’explosion. A part le kamikaze, tous les passagers 
ont eu la vie sauve. Le gouvernement somalien a confirme qu’il 
s’agissait d’un acte de terrorisme organise. 

• Selon des medias grand public citant des sources proches de 
I’enquete des autorites egyptiennes sur I’ecrasement du vol 9268 de MetroJet en 
octobre 2015, quatre individus ont ete detenus en lien avec I’affaire. L’avion s’est 
ecrase dans la peninsule du Sinai apres son decollage de I’aeroport international de 
Charm el-Cheikh; les 224 personnes a bord ont peri. Plusieurs experts ont confirme 
qu’un engin explosif en etait la cause. Peu de temps apres I’accident, le groupe EIIS 
a revendique I’attentat. Un technicien d’Egypt Air, dont le cousin aurait adhere au 
groupe EIIS, est soupgonne d’avoir pose I’engin a bord du vol. Selon des sources, le 
technicien ainsi que le bagagiste soupgonne de I’avoir aide a poser I’engin dans 
I’avion ont ete detenus. Deux policiers travaillant dans I’aeroport ont egalement ete 
places en detention. 

• Terry Loewen, 58 ans, technicien en avionique, a ete arrete en 2013 pour avoir 
apparemment planifie de faire exploser un vehicule-bombe sur I'aire de trafic de 
I'aeroport Mid-Continent de Wichita (Kansas), ou il travaillait, a proximite d'aerogares 
et d'aeronefs de passagers. En utilisant sa carte d'acces d'employe pour se rendre 
sur I'aire de trafic tot un matin de decembre, il aurait cru qu'il infligerait un maximum 
de dommages physiques, economiques et materiels en perpetrant I'attentat juste 
avant les vacances de Noel, I'une des journees les plus achalandees de I'annee. 




Federal Policing Criminal Operations 

Ce document appartient au Programme de securite nationale de la Gendarmerie royale du Canada (GRC). II est expressement prete a votre organisme a titre confidentiel et aux fins d’usage interne seulement. II ne 
peut etre reclassifie, copie, reproduit, utilise en tout ou en partie ou diffuse a un plus large auditoire sans le consentement de I'auteur. II ne peut etre utilise dans des affidavits, des procedures judiciaires ou des 
citations a comparaitre ou encore a toute autre fin juridique ou judiciaire sans le consentement de I’auteur. Le traitement et I’entreposage de ce document doivent respecter les directives etablies par le 
gouvernement du Canada pour le traitement et I’entreposage des renseignements classifies. Si votre service ne peut pas appliquer ces lignes directrices, veuillez lire le document et le detruire. La presente mise en 
garde fait partie integrante de ce document et doit accompagner tous les renseignements qui en sont extraits. Si vous avez des questions au sujet des renseignements ou de la mise en garde, veuillez communiquer 
avec I’officier resoonsable des Ooerations criminelles relatives a la securite nationale. GRC. 


Royal Canadian roya e 

Mounted Po co du Canada 


(2 


A0326651 11-000058 


11 



Selon des documents judiciaires, Loewen se serait livre aux activites suivantes : 
etudie I'agencement de I'aeroport et pris des photos des points d'acces; consulte les 
horaires de vol; aide a obtenir des composants de I'engin explosif et parle de sa 
determination a declencher I'engin explosif et a devenir un martyr. II a ete condamne 
a 20 ans d’emprisonnement. 

• Belal Sadallah Khazaal a travaille comme bagagiste pour Qantas pendant 12 ans 
(de 1988 a 2000). Pendant ces annees, il a attire I’attention des autorites 
australiennes. Selon un rapport de la CIA, Khazaal aurait suivi en 1998 une 
formation dans un camp militaire en Afghanistan et serait devenu un confident pour 
des dirigeants d’al-Qai'da. On a trouve un guide de 110 pages redige par Khazaal 
expliquant comment fabriquer des bombes, comment perpetrer un assassinat ou un 
enlevement et comment descendre un avion en vol. Un tribunal a juge que le guide 
visait a faciliter la commission d’actes terroristes. En 2009, Khazaal a ete condamne 
a 12 annees d’emprisonnement. 


• Rajib Karim a travaille comme concepteur de logiciels pour British Airways (BA) de 
2007 a son arrestation en 2010. Pendant le proces, la poursuite a fait valoir que 
Karim avait deliberement cherche a se placer a BA pour pouvoir conseiller des 
terroristes au Yemen, au Pakistan et au Bangladesh sur des aspects particuliers des 
dispositifs de securite dans les aeroports, sur les liquides permis et sur les questions 
que les agents de I’immigration posent aux voyageurs. Pendant qu’il travaillait a BA, 
Karim echangeait des courriels avec Anwar Al-Awlaki, qui etait alors un membre 
dirigeant d’al-Qa'ida dans la peninsule arabique. Al-Awlaki a ordonne a Karim de 
recruter des collegues qui pourraient savoir comment contourner les detecteurs a 
rayons X de I’aeroport. Apres quoi Karim s’est rapproche d’un bagagiste et d’un 
employe de la securite a I’aeroport Heathrow. Karim a aussi offert de profiter d’une 
eventuelle greve du personnel de BA pour devenir agent de bord a titre temporaire. 
En 2011, Karim a ete condamne a 30 annees d’emprisonnement. 




Samina Malik travaillait 
dans une boutique cote piste 
a I’aeroport Heathrow. En 
2006, elle communiquait par 
courriel avec I’extremiste 
condamne Sohail Qureshi. 
Ce dernier a admis avoir 
planifie un attentat terroriste 
a I'etranger, peut-etre contre 
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les troupes britanniques en Afghanistan. Selon la police, Malik a fourni a Qureshi de 
I'information sur les dernieres mesures de securite mises en place a I'aeroport. 
Qureshi voulait apparemment sortir du pays incognito pour executer son operation a 
I'etranger. Avant d’essayer de partir, Qureshi a ecrit a Malik : « Ma soeur, j'espere 
que tu auras ce courriel avant quelqu'un d'autre. A quoi ressemble le systeme au 
travail? Les verifications sont-elles toujours aussi rigoureuses ou les choses se sont- 
elles calmees un peu? ... Supprime le message apres I'avoir lu! » Dans sa reponse, 
Malik a decrit en detail les mesures de securite, notamment les procedures de 
palpation sommaire et de verification des liquides. Elle a signe : « Une etrangere 
dans I'attente de devenir une martyre. » Parmi les articles dans les bagages de 
Qureshi, on a trouve un manuel de formation d'AQ, des lunettes de vision nocturne 
et des manuels militaires canadiens et americains dans lesquels on fait reference a 
des tactiques d'intervention et de combat en zone urbaine. 

• Asmin Amin Tariq est I'une des 24 personnes qui ont ete arretees relativement au 
complot d'attentat aux liquides explosifs de 2006 qui visait dix vols transatlantiques. 
Avant d'etre arrete, Tariq travaillait comme garde de securite pour Jet Airways a 
I'aeroport Heathrow, aussi il avait acces en tout temps a tous les secteurs de 
I’aeroport. Selon la US Transportation Security Administration, Tariq a aide des 
extremistes islamistes a se faire passer pour des employes de I'aeroport afin de 
mener a bien leur reconnaissance des dispositifs de securite a Heathrow. De plus, 
Tariq aurait fourni de I'information sur les procedures de securite de I'aeroport a de 
futurs poseurs de bombes potentiels. 

• Arid Uka travaillait au bureau de poste 
du Terminal 2 de I’aeroport de Francfort. 

Le 2011-03-02, il est sorti du terminal et 
s’est approche d’un autobus. Apres 
s’etre assure qu’il transportait des 
militaires americains en partance pour 
I’Afghanistan, il est monte a bord et a 
tire neuf coups de feu avec un pistolet, 
tuant le chauffeur et un soldat. Deux 
autres soldats ont ete blesses. Selon 
des sources publiques, I’un des 
elements declencheurs de la tuerie 
d’Uka a ete le visionnement d’un extrait 
d’un film de fiction ou des soldats 
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americains se livraient a un viol. En 2012, Uka a ete condamne a I’emprisonnement 
a perpetuite. 

• Gregory Patterson, converti a I’lslam, travaillait en 2005 dans une boutique hors- 
taxes a I’aeroport international de Los Angeles (LAX). II etait I’un des quatre agents 
recrutes par un groupe extremiste installe en Californie, Jami'iy yat Ul-lsla Is Saheeh 
(JIS), qui voulait attaquer le comptoir des billets du transporter aerien El Al a 
I’aeroport. Selon I'entente sur le plaidoyer du cerveau de I'operation Kevin James, le 
defender a ecrit une lettre en mars 2005 a son coconspirateur Levar Washington 
lui disant que Patterson devrait garder son emploi a I'aeroport. Patterson a fait de la 
reconnaissance et des recherches en ligne sur El Al. II a aussi achete une carabine 
et s’est pratique au tir, et a appris a fabriquer des explosifs artisanaux. II a ete 
condamne a douze ans et demi d’emprisonnement. 


Russell Defreitas a travaille comme manutentionnaire de fret a I’aeroport 
international JFK, puis comme superviseur des stagiaires d’une compagnie de fret 
jusqu’a ce qu’il soit mis a pied en 2001. Defreitas etait le cerveau derriere le complot 
de 2007 visant les reservoirs et les pipelines de distribution de carburant aviation a 
I'aeroport international JFK. Selon des conversations enregistrees et un informateur 
du FBI, Defreitas aurait dit que ses connaissances uniques de I'aeroport et de ses 
vulnerability seraienttres utiles pourfaire progresser I'attentat. Selon des 
documents judiciaires, Defreitas a dit a 
ses consorts qu'a plusieurs reprises il 
avait teste les dispositifs de securite en 
place a JFK en volant des 
marchandises. Defreitas aurait filme et 
pris des photos de I'aeroport pour aider a 
reperer des cibles, tire des images de Google Earth du secteur cible, etudie la 
securite de I'aeroport et planifie la fuite apres I'attentat. En 2011, il a ete condamne a 
I’emprisonnement a perpetuite. 



• De 1997 a 2002, Adem Yilmaz a ete garde de securite pour la compagnie 

ferroviaire Deutsche Bahn a la gare regionale de I'aeroport de Francfort. Cette gare 
est situee sous le Terminal 1 de I'aeroport. Membre de I'Union du jihad islamique, 
Yilmaz faisait partie d’une cellule de quatre personnes qui avait d'abord envisage de 
cibler I'aeroport de Francfort. Apres un certain temps, le complot d’attentat s’est 
tourne vers d’autres cibles en Allemagne, y compris des Americains expatries et la 
base des forces aeriennes americaines de Ramstein. En 2010, Yilmaz a ete 
condamne all annees d’emprisonnement. 
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• Muhammad Syahrir a travaille comme technicien d’aeronef pour la ligne aerienne 
nationale d’lndonesie, Garuda. La police croit qu’il a infiltre Garuda pour les besoins 
d’un vaste complot dirige contre le transporteur aerien. Membre du Jamaah 
Islamiyah affilie a AQ, Syahrir aurait ete un redoutable fabriquant de bombe et 
participe aux attentats a la bombe perpetres en 2009 contre des hotels d’lndonesie. 
II a ete tue dans une descente policiere. 
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1 "EXTREMISTES INTERNES (EMPLOYES) DANS L'INDUSTRIE DE L'AVIATION : TENDANCES ETTECHNIQUES", ERIE, 
GRC, 2013-05-01. 
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mYAL CANADIAN MOUNTED POLICE * GENDARMERIE ROYALE DU CANADA ^ 



BULLETIN DE L EQl PE VV ONALE DES NFRASTRUCTURES 


2016 - 07-15 

A I'appui de la strategie adoptee par le gouvernement du Canada pour assurer la resilience des 
infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) evalue et signale 
I'information relative aux menaces et a la criminalite dirigees contre les IE canadiennes. Ces 
renseignements peuvent aider a proteger les IE du pays. Les evaluations de I’Equipe nationale 
des infrastructures essentielles (ENIE) visent a fournir aux intervenants concernes une 
evaluation des renseignements sur les enjeux lies a la protection des IE. L’information figurant 
dans la presente evaluation est a jour au 15 juillet 2016 . 


PRINCIPALES CONSTATATIONS 
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CONTEXTE 


Le 2016-07-14, durant la 
fete nationale frangaise a 
Nice (France), le 
conducteur d'un semi- 
remorque a fonce dans la 
foule venue assister aux 
celebrations sur la fameuse 
Promenade des Anglais. 

Selon les temoins, le 
conducteur, qui roulait a 
environ 50 km/h, a 
zigzague sur un trongon 
d'environ 2 km de la 
Promenade afin de faucher 
le maximum de pietons Source: AgenceFrance-Pmsse 

avant d'echanger des tirs 

avec les policiers. Peu apres, le conducteur a ete abattu. L'attaque, qui serait I’oeuvre 
d’un terroriste, aurait fait au moins 84 morts selon les autorites locales. 

Les Services consulaires d'Affaires mondiales Canada ne rapportent aucun Canadien 
parmi les victimes. Selon I’agent de liaison responsable de la region, il n’y a pas de lien 
connu entre cette attaque et le Canada. 



EVALUATION 
I) Impact 

Les precedentes evaluations de I'ENIE et de ses partenaires montraient que ce mode 
operatoire ne faisait jusque-la que tres peu de victimes (environ un ou deux morts par 
attaque). 
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A titre d'exemple, en I’espace de trois 
mois (d’octobre a decembre 2014), on 
a recense six incidents impliquant le 
recours a un vehicule par des 
individus qui ont deliberement heurte 
des pietons, tuant six personnes et en 
blessant environ 45 autres. Ces 
attaques avaient ete perpetrees au 
Canada (1), en France (2) et en Israel 
(3). (Voir le compte rendu complet a 
I’ANNEXE A.) 
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II) Acces 


L’utilisation d'une semi-remorque plutot qu'un 
vehicule personnel dans I'attaque perpetree a 
Nice pose la question de savoir comment une 
personne malintentionnee pourrait se procurer un 
poids lourd. 





Source: Twitter 


III) Imitation 

Au moins trois organisations terroristes ont incite a commettre de telles attaques, a 
savoir I’Etat islamique (El), le Hamas et al-Qai'da dans la peninsule arabique (AQPA). 
La propagande extremiste regorge d’illustrations, dont des affiches et instructions 
publiees en ligne. (Voir le compte rendu complet a I'ANNEXE B. 
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iv) Vulnerabiiites 


JE3 58888881 Hiils^iiTf*lEst 


Un indicateur a lui seul n’est pas necessairement revelateur, mais I’observation 
de plusieurs des comportements ci-dessous chez un individu ou un groupe 
pourrait indiquer la preparation d’une attaque : 
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Recommandations 


II est important que tous les partenaires, y compris les organismes d’application de la loi 
et le personnel de securite du secteur prive, signalent tout ce qui leur semble suspect. 
Le personnel de premiere ligne est le mieux place pour observer les comportements 
suspects. Ms connaissent ce qui les entoure et savent ce qu’il est normal d’y trouver au 
quotidien. Un incident isole peut sembler anodin, mais la conjonction de plusieurs 
incidents peut trahir une menace reelle. 
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Pour signaler une activite suspecte, un cas d’extremisme criminel ou toute autre activite 
qui pourrait menacer la securite nationale du Canada, communiquez avec : 


le Reseau infosecurite nationale : 1-800-420-5805 
le Service canadien du renseignement de securite (SCRS): 613-993-9620 


Redige par: I'Equipe nationale des infrastructures essentielles 
Enquetes criminelles de la Police federate 
Courriel : SIR-SIS@RCMP-GRC.GC.CA 
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ANNEXE A - INCIDENTS IMPLIQUANT DES WEHICULES UTILISES COMME A RUE 

jy® fill aLsw Is Ilf %ws?.S J&»y If J? s? s W s? Hhw# Jtl # If a? I# Lw W Sft»» is I? a? !»«« !»»« « s? $k»«as ^s# i&»w « sFs Iff $»a» § «k § Ws .W 

(OCTOBRl A DECEMBRE 2014) 


• Le 20 octobre 2014, vers 11 h 30 HNE, un homme seul, repondant au nom de 
Martin Couture-Rouleau, a percute avec son vehicule deux membres des Forces 
canadiennes qui sortaient d’un cafe a Saint-Jean-sur-Richelieu (Quebec). Un des 
soldats a ete grievement blesse et est par la suite decede; le second a subi des 
blessures mineures. M. Couture-Rouleau a pris la fuite a bord de son vehicule et, 
pris en chasse par la police locale, a eu un accident a environ quatre kilometres 
de la. II est sorti de son vehicule, puis a ete abattu apres avoir menace les 
agents d’un couteau. II est mort a I’hopital ou on I’a transports. 

• Le 22 octobre 2014, peu apres 18 h, un homme de 21 ans a fonce avec son 
vehicule dans une foule massee a un arret du train leger a Jerusalem, situe a 
proximite d’une voie de circulation achalandee. Un bambin a ete tue et neuf 
personnes ont ete blessees a leur sortie du train. L’automobiliste a ete identifie 
par la police; il s’agit d’un terroriste palestinien connu du quartier Silwan a 
Jerusalem Est. L’homme a ete abattu par les policiers et s’est eteint a I’hopital. 

• Le 5 novembre 2014, le chauffeur d’une minifourgonnette a fonce sur un groupe 
de plus de 12 personnes qui descendaient d’un tramway, sur I’itineraire reliant 
les secteurs Est et Ouest de Jerusalem. Le chauffeur est ensuite sorti de son 
vehicule pour attaquer un groupe se trouvant sur la plate-forme, dont des 
policiers, a I’aide d’une barre de metal, avant d’etre abattu par la police. Les 
autorites israeliennes estiment qu’il s’agit d’un attentat terroriste. Toujours selon 
les autorites israeliennes, I’homme, age de 38 ans, provenait d’un camp de 
refugies de I’Est de la ville et etait partisan du Hamas, un groupe islamiste 
palestinien. 

• Le 5 novembre 2014, Hamam Masalma, un membre du Hamas age de 23 ans, a 
fonce avec une fourgonnette commerciale portant une plaque d’immatriculation 
des autorites palestiniennes contre trois soldats israeliens se trouvant a une 
intersection en Cisjordanie. Les trois hommes ont ete blesses. 

• Le 21 decembre 2014, un automobiliste age de 40 ans a fonce dans la foule a 
Dijon (France) blessant quelque 11 personnes. Au moins une des victimes aurait 
ete mortellement blessee. Le chauffeur, qui, selon les autorites, souffrait 
d’instabilite mentale, a ete arrete par la police apres avoir cible des pietons a 
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cinq endroits differents de la ville dans la nuit qui a suivi. Durant ce 
dechaTnement qui a dure 30 minutes, le chauffeur aurait crie : « Allahu Akbar » 
(Dieu est grand) et qu’il agissait au nom des enfants de Palestine. Le procureur 
general de Dijon a mentionne que le chauffeur n’avait aucun lien connu avec des 
groupes terroristes de I’etranger et qu’il avait agi seul. II etait connu des services 
de police pour des incidents mineurs remontant a 20 ans et avait ete interne 
dans un etablissement psychiatrique a un moment donne. 

• Le 22 decembre 2014, le conducteur d’une fourgonnette a fonce dans un marche 
bonde de clients qui faisaient leurs emplettes de Noel a Nantes, blessant dix 
d’entre eux. Le chauffeur se serait ensuite poignarde. Les autorites estiment qu’il 
s’agissait d’un acte delibere, et ajoutent que le conducteur n’a invoque aucun 
motif religieux ou politique, semblait agir seul et souffrait probablement de 
troubles mentaux. Les temoins ne s’entendent pas pour ce qui est de savoir si le 
conducteur a crie « Allahu Akbar » ou non. 
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ROYAL CANADIAN MOUNTED POLICE * GENDARMERIE ROYALE DU CANADA ? 
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Pir l\no I rtut* 11 Cl £ qq! if 1II I I Ld 


SI NS B x SATION DE S AGE NTS : 

Attaqi e v>x. couteau oans i i bureau de recrutement des Forces 

canadiennes a Toronto 


2016 - 03-15 

A I’appui de la strategie adoptee par le gouvernement du Canada pour assurer la 
resilience des infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) 
evalue et signale I’information relative aux menaces et a la criminalite dirigees contre 
les IE canadiennes. Ces renseignements ou ces elements d’information peuvent servir 
a proteger les IE du Canada. L’information contenue dans le present bulletin date du 
15 mars 2016. Les membres des organismes d’application de la loi et les militaires 
canadiens font partie du secteur de la Securite, que le gouvernement considere comme 
I’un des six secteurs d’lE au Canada. 


CONTEXTE 


MANIPULATION DE RENSEIGNEMENTS 

Le present document appartient a la Gendarmerie royale du Canada (GRC). Son contenu est tire de plusieurs sources dont I’information est en vigueur a la date de publication du document. II est transmis a titre 
confidentiel a votre service ou organisme, qui peut le diffuser a des organismes d’application de la loi ou a des partenaires de I’application de la loi qui ont besoin de I’information (besoin de savoir). Ce document ne 
doit pas etre reutilise, en tout ou en partie, sans le consentement de I’auteur. Les commentaires relatifs au present document doivent etre envoyes par courriel au directeur general, Operations criminelles de la 
Police federale (OCPF). 

Le present document peut faire I’objet d’une exception obligatoire en vertu de la Loi sur I’acces a I’information ou de la Loi surla protection des renseignements personnels. Les renseignements qu’il contient 
peuvent egalement etre proteges par les dispositions de la Loi sur la preuve au Canada. Its ne peuvent pas etre diffuses ou utilises comme preuve sans que Ton ait consulte au prealable le directeur general, 
Operations criminelles de la Police federale (OCPF). 
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EVALUATION DE L’ENIE 


A I’heure actuelle, I’ENIE ne detient aucune information precise qui laisse croire a 
une menace imminente contre des installations ou le personnel policier ou 
militaire du Canada. 


MANIPULATION DE RENSEIGNEMENTS 

Le present document appartient a la Gendarmerie royale du Canada (GRC). Son contenu est tire de plusieurs sources dont I’information est en vigueur a la date de publication du document. II est transmis a titre 
confidentiel a votre service ou organisme, qui peut le diffuser a des organismes d’application de la loi ou a des partenaires de I’application de la loi qui ont besoin de I’information (besoin de savoir). Ce document ne 
doit pas etre reutilise, en tout ou en partie, sans le consentement de I’auteur. Les commentaires relatifs au present document doivent etre envoyes par courriel au directeur general, Operations criminelles de la 
Police federale (OCPF). 

Le present document peut faire I’objet d’une exception obligatoire en vertu de la Loi sur I’acces a I’information ou de la Loi surla protection des renseignements personnels. Les renseignements qu’il contient 
peuvent egalement etre proteges par les dispositions de la Loi sur la preuve au Canada. Its ne peuvent pas etre diffuses ou utilises comme preuve sans que Ton ait consulte au prealable le directeur general, 
Operations criminelles de la Police federale (OCPF). 
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Une liste complete des attentats commis contre des organismes d’application de la loi 
et des militaires occidentaux figure a I’ANNEXE A. 

I ACTEl R A PRENDRE EN CONSIDERATION 


(Des exemples precis figurent a I’ANNEXE B.) 

II est important que tous les partenaires, y compris les militaires, les organismes 
d’application de la loi et le personnel de securite du secteur prive, signalent tout ce qui 
leur semble suspect. Le personnel de premiere ligne est le mieux place pour observer 
les comportements suspects. 

L’ENIE encourage les destinataires du present document a signaler a leur service de 
police local toute activite suspecte ou criminelle. Pour signaler une activite suspecte, un 
cas d’extremisme criminel ou toute autre activite qui pourrait menacer la securite 
nationale du Canada, communiquez avec : 

Reseau info-securite nationale : 1-800-420-5805 
Service canadien du renseignement de securite (SCRS): 613-993-9620 


Redige par: Equipe nationale des infrastructures essentielles 
Operations criminelles de la Police federale 
Courriel : SIR-SIS@RCMP-GRC.GC.CA 


MANIPULATION DE RENSEIGNEMENTS 

Le present document appartient a la Gendarmerie royale du Canada (GRC). Son contenu est tire de plusieurs sources dont I’information est en vigueur a la date de publication du document. II est transmis a titre 
confidentiel a votre service ou organisme, qui peut le diffuser a des organismes d’application de la loi ou a des partenaires de I’application de la loi qui ont besoin de I’information (besoin de savoir). Ce document ne 
doit pas etre reutilise, en tout ou en partie, sans le consentement de I’auteur. Les commentaires relatifs au present document doivent etre envoyes par courriel au directeur general, Operations criminelles de la 
Police federale (OCPF). 

Le present document peut faire I’objet d’une exception obligatoire en vertu de la Loi sur I’acces a I’information ou de la Loi surla protection des renseignements personnels. Les renseignements qu’il contient 
peuvent egalement etre proteges par les dispositions de la Loi sur la preuve au Canada. Its ne peuvent pas etre diffuses ou utilises comme preuve sans que Ton ait consulte au prealable le directeur general, 
Operations criminelles de la Police federale (OCPF). 
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ANNEXE A - ATTENTATS COMMIS CONTRE DES ORGANISMES D'APPLICATION 
DE LA LOi ET DES MSLITAIRES OCCIDENTAUX 


LEGENDE ; 


ATTENTATS REUSSIS 


COMPLOTS RATES 


PAYS 

TYPE 

D'ATTENTAT 

RESUME 

m 

-A 

Le 2014-09-23, Abdul Numan Haider, 18 ans, 
qui soutenait ouvertement I'EIIL, est abattu apres 
qu’il eu apparemment poignarde deux policiers a 
I'exterieur d'un poste de police en Australie. Le 
presume assaillant avait accepte de rencontrer 
des membres d'un groupe anti-terroriste dans le 
cadre d'une enquete et s'etait recemment fait 
retirer son passeport. Selon des sources 
ouvertes, la police faisait enquete sur lui en lien 
avec des allegations voulant qu'il ait deferle un 
drapeau de I'Etat islamique dans un centre 
commercial de la banlieue. 



Le 2014-10-07, quatre hommes dans la jeune 
vingtaine ont ete arretes au Royaume-Uni lors 
d'un raid anti-terroriste. 

k 4 


De 

plus, il semblerait que les hommes avaient des 
images, envoyees par Instagram, de deux 
policiers de la police metropolitaine de Londres 
et de deux agents de soutien a la police 
communautaire. La defense soutient que les 
hommes avaient I'intention d’abattre des 
policiers et des militaires dans les rues de 
Londres. 


MANIPULATION DE RENSEIGNEMENTS 

Le present document appartient a la Gendarmerie royale du Canada (GRC). Son contenu est tire de plusieurs sources dont I’information est en vigueur a la date de publication du document. II est transmis a titre 
confidentiel a votre service ou organisme, qui peut le diffuser a des organismes d’application de la loi ou a des partenaires de I’application de la loi qui ont besoin de I’information (besoin de savoir). Ce document ne 
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Le 2014-10-20, Martin Couture-Rouleau, age de 
25 ans, a heurte a I’aide de son vehicule deux 
membres des Forces canadiennes alors qu’ils 
sortaient d’un cafe a Saint-Jean-sur-Richelieu 
(Quebec). Selon les informations recueillies, 
Couture-Rouleau attendait, dans sa voiture en 
marche dans un stationnement d'un mail 
lineaire, d'apercevoir du personnel militaire. II a 
pris la fuite a bord de son vehicule et, pris en 
chasse par la police locale, a subi une collision a 
environ quatre kilometres de la. II a quitte son 
vehicule, puis a ete abattu apres avoir menace 
les agents d’un couteau. _ 



Le 2014-10-22, Michael Zehaf-Bibeau, age de 
32 ans, a tue par balles un soldat canadien au 
Monument commemoratif de guerre du Canada 
a Ottawa avant de prendre d’assaut I’Edifice du 
Centre sur la Colline du Parlement. II a ete tue 
dans I'Edifice du Centre de la Colline du 
Parlement par les forces de securite. _ 




Le 2014-10-23, une escouade de quatre agents 
du service de police de New York effectual une 
patrouille a pied dans un quartier de New York. 
Ms ont ete attaques par Zale Thompson, age de 
32 ans. Une video de I’incident montre un 
homme courant vers les policiers avec I’arme 
blanche, apres etre sorti de derriere un abribus 
non loin de la. Selon les medias, I’homme a 
brandi la hachette en direction de deux des 
agents qui, n’etant pas blesses, ont tire en sa 
direction. Selon des sources ouvertes, 

Thompson avait un easier judiciaire en Californie 
et avait ete renvoye de la marine americaine 
pour inconduite. 




Le 2014-12-20, un Franco-Burundais, Bertrand 
Nzohabonayo (alias Bilal Nzohabonayo), aurait 
cogne a la porte d’un poste de police a Joue-les- 
Tours (France). Lorsqu’un agent a ouvert, 
I’agresseur, age de 20 ans, lui a assene un coup 
de couteau au visage. L’agresseur est ensuite 
parvenu a neutraliser et a blesser un second 
agent qui avait degaine. Une agente a alors 
abattu I’agresseur d’un coup de feu. Selon la 
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police, Nzohabonayo aurait crie « Allahu Akbar » 
(Dieu est Tout-Puissant) durant I’agression. 


1 


Le 2015-01-08, Ahmedy Coulibaly, age de 32 
ans, a abattu un policier municipal de la banlieue 
de Paris. Apres avoir prete allegeance a I'EIIL, 
Coulibaly a lance une serie d'attaques devant 
coincider avec le siege dans les bureaux de 
Charlie Hebdo a Paris. 

t J 


Le 2015-01-14, Christopher Lee Cornell, age de 
20 ans, a ete arrete par le FBI pour avoir 
complote un attentat inspire de I'EIIL contre le 
Capitole, aux Etats-Unis, y compris des 
representants du gouvernement et des policiers. 

II voulait faire exploser des bombes tuyaux 
artisanales dans des immeubles 
gouvernementaux tout en tirant sur des hauts 
representants americains. II avait achete des 
fusils semi-automatiques et 600 munitions avant 
de se rendre a Washington. 


> 

Le 2015-01-16, des individus soupgonnes de 

1 

faire partie d'une cellule de 15 membres ont ete 
arretes en Belgique et en France parce que les 
autorites affirmaient qu'ils avaient I'intention de 
tuer plusieurs policiers beiges dans les rues et 
les postes de police. Diverses armes a feu, des 
uniformes de police, des explosifs et un couteau 
ont ete saisis pendant le raid. 
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Le 2015-02-03, Moussa Coulibaly, 31 ans, a 
attaque au couteau trois soldats d'un groupe 
antiterroriste frangais a Nice, en France. Les 
soldats patrouillaient les bureaux d'une station 
de radio juive. Personne n'a ete blesse 

gravement. _ 

Le 2015-03-26, un specialiste de la Army 
National Guard, Hasan Edmonds, et son cousin, 
Jonas Edmonds, 29 ans, ont ete arretes par les 
autorites americaines pour avoir semble-t-il 
conspire de fournir de I'equipement de soutien a 
I'EIIL et de mener des attaques contre des 
installations militaires americaines en Illinois. 


Le 2015-04-27, Nerdin Ibric, age de 24 ans, a 
crie « Allahu Akbar » (Dieu est tout-puissant) 
lorsqu'il a attaque un poste de police a Zvornik, 
en Bosnie-Herzegovine. Un policier a ete tue et 
deux autres ont ete blesses. Selon les autorites 
bosniennes, Ibric est entre dans le poste de 
police arme d'un fusil automatique, puis a ete 
abattu par la police apres quelques echanges de 
coups de feu. Deux autres suspects, Avdulah 
Hasanovic, 24 ans, et Kasim Mehidic, 40 ans, 
ont egalement ete arretes en lien avec cet 
attentat fatal. Hasanovic etait sous enquete pour 
avoir semble-t-il aider au recrutement de 
combattants pour I'EIIL. 


En avril 2015, Noelle Velentzas, 28 ans, et Asia 
Siddiqui, 31 ans, ont ete arretees pour des 
attentats inspires de I'EIIL qu'elles voulaient 
mettre a execution a New York. Les deux 
femmes avaient effectue des recherches 
approfondies sur la fagon de concevoir un engin 
explosif et auraient eu en leur possession des 
bonbonnes de propane, du fertilisant et un 
exemplaire de The Anarchist Cookbook, un 
manuel qui fournit des instructions detaillees sur 
la maniere de fabriquer des engins explosifs. 
Leur complot consistait a cibler des bases 
militaires et les funerailles de policiers du service 
de police de New York. 
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Le 2015-04-10, John T. Booker Jr., age de 20 
ans, a ete arrete par les autorites americaines 
pour avoir tente de commettre un attentat- 
suicide inspire de I'EIIL a I'installation militaire 
Fort Riley, au Kansas. Booker aurait tente de 
brancher des fils a ce qu'il croyait etre un engin 
explosif a I'interieur d'un vehicule. 


Le 2015-07-16, Mohammad Youssef 
Abdulazeez a ouvert le feu dans un centre de 
recrutement militaire situe dans un mail lineaire 
a Chattanooga, au Tennessee. A bord d'une 
Ford Mustang decapotable louee de couleur 
argent, il a ouvert le feu au moyen d'un fusil AK- 
47. II s'est ensuite rendu a un centre de la 
reserve navale, situe a sept miles de la, ou il a 
ouvert le feu. II a ete abattu sur les lieux du 
deuxieme endroit apres avoir fonce dans une 
barriere. II a tue quatre marins et en a blesse 
trois. 


En avril 2015, cinq adolescents ont ete arretes 
pour avoir complote de mener un attentat inspire 
de I'EIIL contre des policiers aux evenements 
d’Anzac Day tenus dans la ville de Melbourne, 
en Australie. Anzac Day est un jour national 
observe en Australie et en Nouvelle-Zelande 
pour honorer la memoire de tous ceux qui sont 
morts au combat, que ce soit lors d’une guerre, 
d’un conflit ou d’une mission de paix. Le complot 
visait a attaquer des policiers et le public au 
moyen d'epees et de couteaux. L’Australian 
Security Intelligence Organization (ASIO) a fait 
savoir que les cinq adolescents avaient ete 
cibles par un recruteur de I'EIIL. 


Le 2015-10-02, Farhad Jabar Khalil Mohammad, 
age de 15 ans, a atteint d'une balle a I'arriere de 
la tete, a une distance rapprochee, un employe 
civil de la police de la Nouvelle-Galles-du-Sud 
(NGS). La victime, Curtis Cheng, age de 58 ans, 
sortait de I'immeuble du quartier general de la 
police par I'entree principale vers 16 h 30 (heure 
locale), lorsque le tireur, qui se trouvait sur le 
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trottoir vetu d’un long vetement noir, a tire le 
coup de feu. Apres ces evenements, la police a 
perquisitionne la residence de Mohammad et y a 
saisi des ordinateurs. Le 2015-10-03, la police 
de la NGS a confirme que la fusillade etait un 
acte terroriste, que Mohammad n’etait pas 
connu des autorites et qu’il a fort probablement 
agi seul. 

1 

A 

Le 2016-01-07, un homme a ete abattu apres 
avoir menace des policiers a I’aide d’un couteau 
de boucherie a I’entree d’un poste de police a 
Paris, en France. L’homme portait une fausse 
veste d’explosifs. La police a trouve sur le corps 
de I’homme un telephone cellulaire, un bout de 
papier ou figurait I’embleme de I’EIIL et un bout 
de papier ou une revendication de responsabilite 
etait ecrite en arabe. 



Le 2016-01-07, Edward Archer, 30 ans, de 
Yeadon en Pennsylvanie, s’est approche d’une 
voiture de police dans le quartier de West 
Philadelphia et a tire plusieurs balles a I’aide 
d’une arme de poing de 9 mm. Le policier a ete 
atteint par trois balles mais a reussi a tirer sur le 
suspect. Ni le policier ni le suspect n’ont 
succombe a leurs blessures. Le suspect a 
declare qu’il avait agi « au nom de I’islam » et 
prete allegeance a I'EIIL. II possedait un easier 
judiciaire charge. 

WmSk - m \ m 


A 

Le 2016-03-04, une jeune Marocaine de 15 ans 
a ete arretee pour avoir poignarde un policier qui 
s’etait adresse a elle dans une gare en 

Allemagne. Le policier avait demande a la jeune 
fille de lui montrer ses papiers d’identite, qu’elle 
lui a remis. Pendant que le policier lisait ses 
papiers, elle I’a poignarde au cou a I’aide d’un 
couteau de cuisine. L’attaque etait inspiree de 
I’EIIL. Incapable de se rendre a I’Etat islamique, 
la jeune fille avait decide d’attaquer une cible en 
Europe. 

| 
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ROYAL CANADIAN MOUNTED POLICE • GENDARMERIE ROYALE DU CANADA' 



BULLETIN DE L’EQUIPE NATIONALE DES 
INFRASTRUC7 URES E NTIE111 S 


SE NS B LISA! ON DE S AGE NTS 

Indices d’atteniais potentials dans des zones d'affiuence 

2016 - 03-22 

A I’appui de la strategie adoptee par le gouvernement du Canada pour assurer la resilience des 
infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) evalue et signale 
I’information relative aux menaces et a la criminalite dirigees contre les IE canadiennes. Ces 
renseignements ou ces elements d’information peuvent servir a proteger les IE du Canada. 
L’information contenue dans le present bulletin date du 22 mars 2016. Les membres des 
organismes d’application de la loi font partie du secteur de la Securite, que le gouvernement du 
Canada considere comme I’un des dix secteurs d’lE au Canada. 

CONTEXTE 

Le present bulletin de sensibilisation des agents (BSA) est publie pour mettre en lumiere les 
indices d’attentats possibles dans des lieux bondes (p. ex. des stations de transport en commun 
et des installations de divertissement) dans la foulee des attentats perpetres a Bruxelles, en 
Belgique. 

Trois explosions ont frappe Bruxelles le 22 mars 2016, faisant au moins 34 morts et 
180 blesses. 1 2 Deux detonations ont devaste I’aire des departs de I’aeroport international de 
Zaventem et une autre explosion a frappe la station de metro Maelbeek. On a appris depuis 
qu’au moins une des deux explosions a I’aeroport etait un attentat-suicide. 3 Toujours a 
I’aeroport, la police a decouvert une ceinture d’explosifs qui n’avait pas explose ainsi qu’un AK- 
47. 4 Ces attentats sont survenus quatre jours apres la capture a Bruxelles de Salah 
ABDESLAM, le principal suspect dans les attentats terroristes de Paris du 13 novembre 2015. 5 
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EVALUATION DE L’ENIE 


Le 22 mars 2016, I’Etat 

islamique (El) a revendique la responsabilite des attentats, selon une declaration diffusee par 
I’agence Amaq, un site Web qui serait proche du groupe extremiste. Le message precisait que 
la Belgique avait ete ciblee en raison de sa participation a la coalition internationale qui lutte 
contre I’EI. 7 


L’ENIE ne dispose pour le moment d’aucun renseignement laissant craindre un attentat 
imminent contre des infrastructures essentielles (IE) canadiennes et 


Les indicateurs comportementaux qui suivent peuvent trahir la preparation ou la perpetration 
imminente d’attentats dans des zones d’affluence. II importe de se rappeler qu’il faut evaluer 
I’ensemble des indicateurs comportementaux et des circonstances avant d’entreprendre une 
intervention des forces de I’ordre. 
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RECOMMANDATiONS 


II importe que tous les partenaires, des organismes d’application de la loi et des services de 
securite du secteur prive, signalent ce qui leur semble suspect. Le personnel de premiere ligne 
est le mieux place pour observer les comportements suspects. II connait le milieu dans lequel il 
evolue et reconnait ce qui fait partie de la routine. Un incident seul peut sembler anodin, mais 
plusieurs incidents pris ensemble peuvent trahir une menace reelle. 

L’ENIE encourage les lecteurs du present document a signaler aux organismes locaux 
d’application de la loi toute activite suspecte ou criminelle. Pour signaler une activite suspecte, 
un cas d’extremisme criminel ou toute autre activite qui pourrait menacer la securite nationale 
du Canada, communiquez avec : 

Le Reseau info-securite nationale : 1-800-420-5805 
Le Service canadien du renseignement de securite (SCRS): 613-993-9620 


Redige par: Equipe nationale des infrastructures essentielles 
Operations criminelles de la Police federale 
Courriel : SIR-SIS@RCMP-GRC.GC.CA 
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Attentat a Orlando 

ndices d’atientats potentials dans des Hem de rassembiemeni 

2016 - 06-14 

A I’appui de la strategie adoptee par le gouvernement du Canada pour assurer la resilience des 
infrastructures essentielles (IE), la Gendarmerie royale du Canada (GRC) evalue et signale 
I’information relative aux menaces et a la criminalite dirigees contre les IE canadiennes. Ces 
renseignements ou ces elements d’information peuvent servir a proteger les IE du Canada. 

L’information contenue dans le present bulletin date du 14 juin 2016. Les membres des 
organismes d'application de la loi font partie du secteur de la Securite, que le gouvernement du 
Canada considere comme I'un des 10 secteurs d’lE au Canada. 

CONTEXTE 

Le present bulletin de sensibilisation des agents (BSA) parait pour mettre en lumiere les indices 
d’attentats possibles dans des lieux de rassemblement (p. ex. des evenements sportifs, des 
stations de transport en commun et des installations de divertissement) dans la foulee de 
I'attentat perpetre le 12 juin 2016 a la boTte de nuit Pulse a Orlando (Floride). 

Vers 2 h 02 le 12 juin 2016, un tireur solitaire a ouvert le feu a I’interieur du Pulse, une boite de 
nuit gaie populaire, blessant mortellement 49 personnes et en blessant 53 autres 1 . L’agresseur, 

Omar MATEEN, age de 29 ans, a appele le 911 au cours d’une confrontation de trois heures 
avec la police et a prete allegeance a I’Etat islamique 2 . Vers 5 h, les groupes tactiques 
d’intervention du Service de police d’Orlando (SPO) se sont introduits de force dans I’immeuble 
et ont abattu le tireur apres que celui-ci ait fait feu sur eux. Tout semble indiquer qu’Omar 
MATEEN aurait ete motive par de la propagande extremiste sur Internet Par ailleurs, le FBI 
aurait effectue deux enquetes anterieures sur les liens eventuels d’Omar MATEEN a 
I’extremisme violent 3 4 . 
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L’attentat a Orlando est representatif d’une tendance preoccupante d’attaques s’inspirant de 
I’extremisme violent dans des lieux de rassemblement qui permettent aux agresseurs de faire le 
plus de victimes possible. Le 22 mars 2016, trois explosions ont frappe Bruxelles, faisant 35 
morts (32 victimes et trois agresseurs) et au moins 180 blesses 5 6 : deux deflagrations ont 
devaste I’aire de depart de I’aeroport international de Zaventem et une troisieme explosion a 
ravage la station de metro Maelbeek 7 8 . L’EI a revendique la responsabilite des attentats et a 
declare que la Belgique etait ciblee a cause de sa participation a la coalition internationale 
luttant contre eux 9 . Le 13 novembre 2015, des attentats quasi simultanes en France ont cible un 
stade de soccer, de multiples restaurants et une salle de concert a Paris. Les fusillades et les 
deflagrations ont fait 130 morts et des centaines de blesses. L’EI a aussi revendique la 
responsabilite de ces attaques, declarant qu’elles constituaient des represailles aux frappes 
aeriennes de la France contre des cibles de I’EI en Syrie et en Irak. 

Le 5 decembre 2015, 14 personnes ont ete tuees et 22 gravement blessees lors d’une fusillade 
et une tentative d’attentat a la bombe a San Bernardino (Californie). Les agresseurs, qui 
s’etaient apparemment autoradicalises apres avoir ete exposes a la propagande de I’EI, ont 
cible une session de formation et une reception des Fetes du departement de la sante publique 
du comte de San Bernardino (reunissant quelque 80 employes) 10 . 


EVALUATION DE L'ENI 


L'attentat a Orlando est la tuerie la plus meurtriere de I'histoire des Etats-Unis et 

A quelques semaines seulement de l'attentat, le porte-parole officiel de I’EI, Abou Mohammed 
al-Adnani a diffuse un message enregistre exhortant les partisans a lancer des attaques contre 
les Etats-Unis et I'Europe durant le ramadan. 

Si les motifs precis de l'attentat a Orlando font toujours I'objet d'une enquete, I'attaque 
constitue un autre exemple de la fagon dont les extremistes locaux et les acteurs solitaires sont 
en mesure d'executer des attentats rigoureusement planifies, sans le soutien direct d'une 
organisation terroriste. II faut aussi reconnaitre le risque que la recente exhortation d'AL- 
ADNANI a executer des attaques contre des civils durant le ramadan inspire des incidents 
similaires. 

En plus d'etre considere comme un cas d'extremisme local, l'attentat a Orlando est egalement 
categorise comme crime haineux contre la communaute LGBT. La premiere edition du Mois de 
la fierte au Canada, qui vise a celebrer la diversity fondee sur le sexe et I'orientation sexuelle, a 
debute le ler juin dernier et prevoit un eventail d'activite et d'evenements (dont des defiles) a 
I'echelle du pays. 


L'ENIE ne dispose pour le moment d'aucun renseignement laissant craindre un attentat 
imminent et 

, Toutefois, certains jugent que les attentats 
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de Paris et de Bruxelles, dont I'EI a revendique la responsabilite, auraient ete perpetres en 
represailles contre la participation de la France et de la Belgique a la coalition contre I'EI. 


Les indicateurs comportementaux qui suivent peuvent trahir la preparation ou la perpetration 
imminente d’attentats dans des lieux de rassemblement II importe de se rappeler qu’il faut 
evaluer I’ensemble des indicateurs comportementaux et des circonstances avant d’entreprendre 
une intervention des forces de I’ordre. 
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RECOMMANDATIONS 


II est important que tous les partenaires, y compris les organismes d’application de la loi et le 
personnel de securite du secteur prive, signalent tout ce qui leur semble suspect. Le personnel 
de premiere ligne est le mieux place pour observer les comportements suspects. II connait le 
milieu dans lequel il evolue et reconnait ce qui fait partie de la routine. Un incident particulier 
peut sembler insignifiant, mais s’il fait suite a plusieurs autres incidents documentes, il pourrait 
signaler une menace serieuse. 

L’ENIE encourage les destinataires du present document a signaler a leur service de police 
local toute activite suspecte ou criminelle. Pour signaler une activite suspecte, un cas 
d’extremisme criminel ou toute autre activite qui pourrait menacer la securite nationale du 
Canada, communiquez avec : 

Reseau info-securite nationale : 1-800-420-5805 
Service canadien du renseignement de securite (SCRS): 613-993-9620 


Redige par: Equipe nationale des infrastructures essentielles 
Operations criminelles de la Police federate 
Courriel : SIR-SIS@RCMP-GRC.GC.CA 
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NATIONAL CRITICAL INFRASTRUCTURE BULLETIN 
UPDATE: EXTREMIST INSIDERS IN THE AVIATION INDUSTRY 


2016 - 02-10 

The RCMP, in support of the Government of Canada’s (GoC) strategy to ensure critical 
infrastructure (Cl) resiliency, assesses, evaluates and reports on information regarding threats 
and criminality to Canada's Cl. This intelligence and/or information may be used to assist in the 
protection of Canada's Cl. Information contained within this Assessment is current as of 

February 10, 2016. This document is deemed to be most applicable to airport policing 
units, other first responder and law enforcement units based at airports, and 
airport/airline security personnel. 


KEY FINDINGS 


the global nature of the aviation industry, coupled with the general 
threat environment, requires law enforcement and security personnel to be aware of the tradecraft 
and trends inherent in known international cases involving aviation insiders. 
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BACKGROUND & LIMITATIONS 

In 2013, NCIT issued an assessment that examined trends and tradecraft related to 
known cases of extremism found within the aviation industry. 


(Please refer to APPENDICES A and B for an illustrative guide 

case summaries.) 

ASSESSMENT 


the global nature of the aviation industry, 
coupled with the general threat environment, requires law enforcement and security 
personnel to be aware of the tradecraft and trends inherent in known international 
cases involving aviation insiders. 


• Historically, confirmed extremist plots involving airport or airline employees have had 
extremely limited success. The low success rate 

can be attributed to the detection and disruption of most plots by authorities. 1 


Federal Policing Criminal Operations 

This document is the property of the Royal Canadian Mounted Police (RCMP), National Security Program. It is loaned specifically to your department/agency in confidence and for internal use only, and it 
is not to be reclassified, copied, reproduced, used or further disseminated, in whole or in part, without the consent of the originator. It is not to be used in affidavits, court proceedings, subpoenas or any 
other legal or judicial purpose without the consent of the originator. The handling and storing of this document must comply with handling and storage guidelines established by the Government of Canada 
for classified information. If your department/agency cannot apply these guidelines, please read and destroy this document. This caveat is an integral part Df this document and must accompany any 
extracted information. For any enquiries concerning the information or the caveat, please contact the QIC National Security Criminal Operations, RCMP. 



Roval Canadian Gendarmerie rovaie 

NOT REVIEWED 


2 


na 


rl'a 


A0000355_26-000026 

A0326651 2-000142 



Processed under the provision of the Access to Information Act / Revise en vertu de la loi sur l’acces a 1’information 


PROTECTED A //THIRD-PARTY RULE// CANADIAN EYES ONLY 

insiders as a successful tactic worth adopting or repeating in the future. This 
possibility makes the detection and reporting of suspicious behaviours increasingly 
vital. 

BEHAVIOURAL INDICATORS 


ii) Potential cases of radicalization 
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POTENTIAL MITIGATIVE ACTIONS 
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RECOMMENDATIONS 

NCIT encourages recipients of this document to report information concerning suspicious or 
criminal activity to local law enforcement organizations. To report information regarding 
suspicious activity, criminal extremism, or other activities which could pose a threat to Canada’s 
national security call: 

National Security Information Network at 1-800-420-5805 
Canadian Security Intelligence Service (CSIS) at (613)-993-9620 


Prepared by: National Critical Infrastructure Team 
Federal Policing Criminal Operations 
Email: SIR-SIS@RCMP-GRC.GC.CA 
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APPENDIX B ~ SUMMARIES OF CONFIRMED AND SUSPECTED CASES OF 
EXTREMISM WITHIN THE AVIATION INDUSTRY 


• On 2016-02-16, Daallo Airlines Flight 159 departed 
from Aden Adde International Airport in Mogadishu, . 
Somalia. According to reports, a suspected suicide 
bomber boarded the aircraft and detonated an 
explosive 15 minutes after takeoff that blew a hole 
through the fuselage. CCTV footage taken at the 
airport prior to the flight allegedly shows two men 
handing what appears to be a laptop computer to the 



suspected bomber after the suspect passed through security. 
At least one of the men who delivered the laptop-like device is 
believed to be an airport employee and is seen wearing a 
bright orange, high-visibility security vest. At least 20 people 
were arrested in connection with the explosion. Aside from the 
bomber, all on board survived what the Somali government has 
confirmed to be a coordinated act of terrorism. 



• According to a mainstream media outlet citing sources close to 

the Egyptian investigation into the October 2015 downing of MetroJet Flight 9268, 
four individuals have been detained in connection with the crash. The plane crashed 
in the Sinai Peninsula after taking off from Sharm el-Sheikh International Airport, 
killing all 224 people aboard. Several experts have confirmed an explosive device 
was responsible. Shortly after the crash, the Islamic State in Iraq and Syria (ISIS) 
claimed responsibility. An EgyptAir mechanic whose cousin reportedly joined ISIS is 
suspected of placing the device on board the flight. The sources said the mechanic 
had been detained along with a baggage handler suspected of helping him put the 
device on board. Two airport policemen have also been detained. 


• Terry Loewen, 58, worked as an avionics technician at Kansas’s Wichita Mid- 
Continent Airport until he was arrested in 2013 for allegedly planning to detonate a 
vehicle-borne improvised explosive device (VBIED) on the airport's tarmac, in 
proximity to passenger planes and terminals. By using his employee access card to 
enter the tarmac on an early December morning, he believed he would inflict 
maximum physical and economic damage by executing the attack just prior to the 
Christmas holiday, on one of the busiest travel days of the year. According to court 
documents, Loewen undertook the following activities: studying the layout of the 
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airport and taking photographs of access points; researching flight schedules; 
assisting in acquiring components for the explosive device; and talking about his 
commitment to trigger the device and martyr himself. Loewen was sentenced to 20 
years in prison. 

• Belal Sadallah Khazaal worked at Qantas as a baggage handler for 12 years 
(1988- 2000). During this time, he became known to Australian authorities. 

According to a CIA report, Khazaal was said to have trained in a military camp in 
Afghanistan in 1998 and to have become a confidant of Al Qaeda leaders. Khazaal 
was found to have produced a 110-page manual that included instruction on bomb¬ 
making, assassinations, kidnappings, and shooting down planes. A court ruling 
found the manual intended to help facilitate terrorist acts. In 2009, Khazaal was 
sentenced to 12 years in prison. 

• Rajib Karim worked as a software developer for British Airways (BA) from 2007 until 
his arrest in 2010. During his trial, prosecutors alleged Karim deliberately found work 
with BA to advise terrorists in Yemen, Pakistan, and Bangladesh on details 
concerning airport security scanners, allowable liquids, and immigration questions 
asked of travelers. During his time at BA, Karim was in email communication with 
Anwar Al-Awlaki, who was then a senior member of Al Qaeda in the Arabian 
Peninsula. Al-Awlaki instructed Karim to recruit co-workers who might know how to 
circumvent airport x-ray machines. In response, Karim was in contact with a 
baggage handler and an associate in airport security at Heathrow Airport. Karim also 
offered to take advantage of a possible labor strike by BA personnel by applying for 
a temporary cabin-crew position. In 2011, Karim was sentenced to 30 years in 
prison. 

• Samina Malik worked as a 
shop assistant on the air- 
side of Heathrow Airport. In 
2006, Malik was in e-mail 
communication with 
convicted extremist Sohail 
Qureshi. The latter admitted 
to planning an overseas 
terrorist attack, possibly 
against British troops in 
Afghanistan. According to 

police, Malik “provided Qureshi with the latest security measures in place” at the 
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airport. Qureshi apparently wished to slip out of the U.K. unnoticed to carry out the 
overseas operation. Before his attempted departure, Qureshi wrote to Malik: “Sis I 
hop u get this email before anyone else does. What is the system like at work? Is the 
checking still very harsh? Or have things calmed down a bit? ... Delete after read!” In 
Malik’s reply, she detailed the security measures, including regimes around pat- 
down searches and checks on liquids. She signed off with the line, "A stranger 
awaiting martyrdom." Among the items found in Qureshi’s luggage: an AQ training 
manual, night-vision goggles, and Canadian and U.S. military manuals which 
referred to guerilla tactics and urban warfare. 

• Asmin Amin Tariq was one of 24 people originally arrested in conjunction with the 
2006 liquid explosives plot against 10 trans-Atlantic flights. Prior to his arrest, Tariq 
worked as a security guard for Jet Airways at Heathrow Airport. As such, he had 24- 
hour access to all areas of the airport. According to the U.S. Transportation Security 
Administration, Tariq helped Islamic extremists pose as airport employees so they 
could conduct surveillance of security procedures at Heathrow. In addition, Tariq 
allegedly provided information about airport security procedures to the would-be 
bombers. 


• Arid Uka worked in the mail room at 
Frankfurt Airport’s Terminal 2. On 2011- 
03-02, he walked outside of the terminal 
and approached a bus. After confirming 
that the bus carried U.S. personnel 
bound for Afghanistan, he boarded it 
and fired nine shots with a pistol, killing 
the bus driver and one soldier. Two 
other soldiers were injured. According to 
open sources, one of the main triggers 
for Uka’s actions was an online video- 
clip of a fictitious rape scene where the 
perpetrators were U.S. military 
personnel. In 2012, Uka was sentenced 
to life in prison. 



• Gregory Patterson, a Muslim convert, worked in a duty-free shop at Los Angeles 
International Airport (LAX) in 2005. He was one of four operatives recruited to a 
California-based extremist group, Jami'iy yat Ul-lsla Is Saheeh (JIS), who considered 
attacking the airport’s El Al Airlines ticket counter. Plot mastermind Kevin James’ 


Federal Policing Criminal Operations 

This document Is the property of the Royal Canadian Mounted Police (RCMP). National Security Program. It is loaned specifically to your department/agency in confidence and for Internal use only, and it 
is not to be reclassified, copied, reproduced, used or further disseminated, in whole or in part, without the consent of the originator. It is not to be used in affidavits, court proceedings, subpoenas or any 
other legal or judicial purpose without the consent of the originator. The handling and storing of this document must comply with handling and storage guidelines established by the Government of Canada 
for classified information. If your department/agency cannot apply these guidelines, please read and destroy this document. This caveat Is an integral part of this document and must accompany any 
extracted information. For any enquiries concerning the Information or the caveat, please contact the QIC National Security Criminal Operations, RCMP. 



rianaHlan n?r»r»Harrrt<5>rIi3 rmrsatg 

NOT REVIEWED 


12 


Ca 




nono 

A0000355 36-000036 


A0326651 12-000152 



Processed under the provision of the Access to Information Act / Revise en vertu de la loi sur l’acces a 1’information 


PROTECTED A //THIRD-PARTY RULE// CANADIAN EYES ONLY 

plea agreement states that “in March 2005, the defendant wrote a letter to [co¬ 
conspirator Levar] Washington telling him that Patterson should keep his job at [the 
airport]”. Patterson conducted surveillance and Internet research on El Al. He also 
purchased a rifle and conducted target practice, and learned how to make 
homemade explosives. He was sentenced to 12.5 years in prison. 

• Russell Defreitas worked as a cargo handler at JFK International Airport and then 
as a trainee supervisor for a cargo company until he was laid off in 2001. Defreitas 
was the mastermind behind the 2007 plot against JFK’s jet fuel storage facilities and 
pipeline systems. According to taped conversations and an FBI informant, Defreitas 
said his “unique knowledge” of the airport and its vulnerabilities would be of utmost 
utility for advancing the attack. According to court documents, he told co¬ 
conspirators that he had tested the security apparatus multiple times when stealing 
cargo. Defreitas is alleged to have taken 
photo/video footage of the airport to help 
identify targets; acquired Google Earth 
images of the target area; studied airport 
security; and planned escape routes. In 
2011, he was sentenced to life in prison. 


• Adem Yilmaz worked as a security guard for rail operator Deutsche Bahn at 
Frankfurt Airport Regional railway station from 1997 to 2002. This station is located 
underneath Frankfurt Airport’s Terminal 1. A member of Islamic Jihad Union, Yilmaz 
was part of a four-person cell that had originally considered targeting Frankfurt 
Airport. Over time, the targets of the explosives plot changed to other German-based 
targets, including American ex-patriots and the US Air Force’s Ramstein Air Base. In 
2010, Yilmaz was sentenced to 11 years in prison. 

• Muhammad Syahrir worked for Indonesia’s national airline, Garuda, as an aircraft 
technician. Police believe he infiltrated Garuda as part of a wider plot against the 
country’s airline sector. A member of AQ-affiliated Jamaah Islamiyah, Syahrir was 
also believed to be a skilled bomb maker associated with the bombing of Indonesian 
hotels in 2009. He was killed in a police raid. 
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ENDNOTES 

1 "EXTREMIST INSIDERS IN THE AVIATION INDUSTRY: TRENDS AND TRADECRAFT", NCIT, RCMP, 2013-05-01. 
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